Enable Microsoft Virtualization-Based Security

You can enable Microsoft virtualization-based security (VBS) on supported Windows guest operating systems.

VBS reinforces the security of Microsoft Hyper-V. When you enable VBS, Fusion configures the virtual machine with the following settings.

Option	Required Setting	Fusion Settings Page
Firmware type	UEFI	Advanced Settings
Enable UEFI Secure Boot	Enabled	Advanced Settings
Enable hypervisor applications in this virtual machine	Enabled	Processors & Memory
Enable IOMMU in this virtual machine	Enabled	Processors & Memory

Prerequisites

• Create a virtual machine that uses hardware version 14 or later and one of the following supported guest operating systems.

  • Windows 10 Enterprise, 64-bit

  • Windows Server 2016

• To use Windows 2016 as the guest operating system, apply all Microsoft updates to the guest. VBS might not function in a Windows 2016 guest without the most current updates.

Procedure

1. Select Window > Virtual Machine Library.
2. Select a virtual machine in the Virtual Machine Library window and click Settings.
3. Under Other in the Settings window, click Advanced.
4. Select Enable VBS.

Results

What to do next

For VBS to run in the guest operating system, you must also perform configurations in the guest. See Microsoft documentation related to virtualization-based security.