2015年11月18日 星期三

0x109_7_1a0_40000 Research into hyper-v cases

0x109_7_1a0_40000
Research into hyper-v cases and looking at vmware workaround
For example, VMWare has a known issue that will modify this MSR register
Our internal security mechanism are detecting a change / misalignment in the Machine Specific Registers
What content was changed in the MSR register, we cannot find out in a dump, since this information is not included in the dump.

Sicne we have seen similar issues in the past we assume that this is because HW/BIOS is not synchronizing register correctly once the security feature called TXT (Intels Trusted Execution Technology) is enabled.

Solution
=======
To enable Processor Compatibility Mode on existing VMs, you need to shut down the VM and change the Processor setting for the VM, selecting the Migrate To A Physical Computer With A Different Processor Version check box, which you’ll find in the Settings dialog box of Hyper-V Manager. 

沒有留言:

張貼留言