If your PC is facing the Memory integrity Is off on Windows 11 error, then you must take action to resolve this issue if you haven’t turned it off intentionally. To know more about the Memory integrity feature of Windows 11, keep reading.
One of the most fatal ways of computer hacking attacks is targeting various core files of a computer operating system. Hackers inject malicious drivers into your computer.
The operating system (OS) considers this a driver and runs it without asking questions. That’s it! Your system is now hacked, and the hacker might steal your data.
To prevent such attacks, OS manufacturers use a high-security environment for the OS core files. The OS will only run trusted and digitally signed drivers during the system boot.
One defense mechanism of Windows 11 and Windows 10 operating systems is Core isolation via Memory integrity. But you might get an automatic error notification from Windows 11 or 10 that the Memory integrity is off on Windows 11. In some other cases, Device Security Memory integrity is off notification is also common.
Keep reading to learn more about Memory integrity and how to resolve any errors related to this Windows security feature.
What Is the Memory Integrity Feature of Windows?
Before you can understand the Memory integrity feature, you must know the Core isolation process of Windows Security. Windows OS creates a virtual hardware-based environment on the system memory chips or RAMs. Then, it runs all core OS programs within that secured block of memories.
Now, hackers try to utilize low-level drivers, like the ones that maintain all communications between the PC Input/Output systems like webcams, mice, keyboards, etc., to get into this secure environment of your PC memory blocks.
Memory integrity kicks in to stop such malicious activities. The feature is commonly known as HVCI or Hypervisor-protected Code Integrity. HVCI or Memory integrity blocks all malicious and un-trusted drivers on your PC. Thus, hackers can’t get into those secure memory blocks that are indispensable for Windows 11 or 10 to run smoothly.
Microsoft ships all new Windows 11 operating system copies with an active Core isolation feature. When you install the OS for the first time, the feature is up and running to prevent malicious drivers.
However, there are situations where you might find the Windows Security Core isolation system is off. Some examples are as mentioned below:
- You’re using an earlier Windows 11 version and didn’t upgrade it lately
- The PC is running Windows 10 operations system
- You’ve intentionally turned off this feature for Windows 11 gaming performance optimization
- Hackers turned off Core isolation during a technical support scam incident
If the Core isolation feature is off, HVCI or Memory integrity won’t kick in when third-party drivers install, the system boots up, or drivers upgrade themselves.
The Device Security section of the Windows Security app will then show a yellow warning sign. If you access the warning, you might see any of the below warning messages:
- Memory integrity is off on Windows 11/ Windows 10
- Device Security Memory integrity is off
- Windows 11 Memory integrity is off
- Memory integrity is off. Your device may be vulnerable
Why Is Memory Integrity off on Windows 11 Concerning?
Since Memory integrity or HVCI controls the functioning of all sorts of drivers on your PC, including the malicious ones, it’s highly concerning if someone or something turns it off.
If you use the PC for gaming and intentionally turn off Core isolation’s Memory integrity feature, then it’s understandable.
However, if you know that you didn’t do it or the PC is for personal and professional use, then the feature must stay on in all situations.
The active Memory integrity feature will prevent the installation of malicious drivers on your PC. If this critical security feature is offline, then your system and all data contained in it are in danger of hacking and ransomware.
How to Fix Memory Integrity Is off on Windows 11 Error
You can try the methods mentioned below to resolve the “Memory integrity is off. Your device may be vulnerable” error on any Windows 10 or 11 PC. Also, try turning on the Memory integrity feature from the Start menu > Windows Security > Device Security > Core isolation details > Toggle On the switch for Memory integrity.
If the service starts, don’t try any more fixes. If the service doesn’t start, try another method and then retry activating Memory integrity.
Method 1: Review Incompatible Drivers
- The error message “Device Security Memory integrity is off” will show the Review incompatible drivers link to troubleshoot the security threat.
- Click the option to go to the Incompatible drivers’ screen.
- Note down the list of drivers or take screenshots on Windows 11 or 10.
- Jump to Method 3 or 4 to get rid of the faulty driver.
Method 2: Utilize the System File Checker Tool
You may face a “Windows 11 Memory integrity is greyed out” error if some critical core files get corrupted. Here’s how you can fix the system files and activate Memory integrity:
- Click the Windows Search icon, type in CMD, and then select Run as administrator.
- Enter this command in the Command Prompt app and hit Enter.
sfc /scannow
- The System File Checker command will find and fix system file issues.
Once done, try to activate Memory integrity from the Core isolation screen of Device Security.
Method 3: Remove Incompatible Drivers
- Open the Command Prompt with admin rights.
- Type in the following command and hit Enter.
dism /online /get-drivers /format:table
- Once you’ve located the incompatible driver’s Published Name from the Command Prompt table, type this command and hit Enter to delete the incompatible driver from your Windows 11 or 10 PC.
pnputil /delete-driver (driver's published name) /uninstall /force
Don’t forget to replace the (driver’s published name) text placeholder with the actual Published Name of the driver. For example, see this command:
pnputil /delete-driver oem40.inf /uninstall /force
Memory integrity troubleshooter shows the Original File Name for the incompatible driver. You must match that name to its Published Name.
Method 4: Uninstall Related Programs or Drivers
If you can find out the underlying program from the driver name, then you can follow these steps to delete the program from your PC to resolve Windows 11 Memory integrity is off issue:
- Right-click on the Start menu button.
- Click Apps and Features from the context menu that pops up.
- Scroll through the list to locate the app.
- If found, select the app and then click Uninstall.
If the Apps and Features option doesn’t work, try these steps:
- Click the Search icon on Windows Taskbar and type Device Manager.
- Select Device Manager under the Best match section on Windows Search.
- On the Device Manager window, click View and checkmark Show hidden devices.
- Now, expand all the device sections one-by-one and right-click to find Uninstall Device option.
- Click Uninstall Device to remove the device and its underlying corrupt driver.
Method 5: Apply Pending Windows 11 or 10 Updates
The Core isolation and Memory integrity features are the dynamic security functionalities of Windows 11 and 10. These systems depend on regular Windows updates.
If you haven’t updated your Windows PC for some time, try these steps to apply pending updates now:
- Open Windows Search and type in Update.
- Click Check for Updates under the Best match section.
- Select Check for updates.
- Wait for the update download and installation.
- Windows will automatically complete these steps.
Method 6: Perform a Clean Boot
- Open Search and type MSCONFIG.
- Select System Configuration.
- Go to the Services tab and checkmark for the checkbox of Hide all Microsoft Services option.
- Now, select Disable All.
- Click Apply, and the tool will ask you to Reboot or Restart the PC.
After the restart, try to activate the Memory integrity feature from the Windows Security app.
Method 7: Activate Hardware Virtualization in BIOS or UEFI
Memory integrity wouldn’t work on Windows PC if you didn’t activate Hardware Virtualization from the UEFI or BIOS menu. This feature is factory enabled in all the latest desktop and laptop PCs based on Windows 11.
However, if using an assembled PC, likely, the feature hasn’t been turned on. Also, the feature may be inactive on two to three years old laptops based on Windows 10 or 11.
Follow these steps to activate the feature from BIOS or UEFI:
- On Windows 11 or 10, open Windows Update from the Search field.
- Choose the Recovery option on the left-side panel.
- Click Restart Now under Advanced startup on the right side.
- Once the PC reboots, click Troubleshoot.
- Now choose Advanced options.
- Click UEFI Firmware Settings; also choose the Restart option from the next screen.
- Now, you should see the BIOS menu.
- Click Advanced Mode; select Advanced again on the next screen.
- Click CPU Configuration.
- Scroll down to Intel Virtualization Technology.
- If it says Disabled, click the button to select Enabled.
- Save the changes and exit the BIOS or UEFI menu.
The above flow is for the latest Intel chipset-based motherboards. If the BIOS or UEFI looks different on your PC, activate any of the following options from the CPU Settings screen:
- Virtualization Extensions
- Intel VT-x
- Vanderpool
Once the device restarts and opens the Desktop, go to Windows Security to activate Memory integrity to fix Windows 11 Memory integrity is off issue.
Conclusion
Now you know how to fix the “Memory integrity is off. Your device may be vulnerable” fault on Windows 11 or 10 PCs.
Comment below if you know another method that I didn’t cover here.
You may also like “how to improve security on Windows 11.”
Did this help? Let us know!