diff --git a/windows/security/identity-protection/credential-guard/how-it-works.md b/windows/security/identity-protection/credential-guard/how-it-works.md
index 46df6ede24..f506df21ac 100644
--- a/windows/security/identity-protection/credential-guard/how-it-works.md
+++ b/windows/security/identity-protection/credential-guard/how-it-works.md
@@ -13,7 +13,7 @@ For security reasons, the isolated LSA process doesn't host any device drivers.
 
 Here's a high-level overview on how the LSA is isolated by using Virtualization-based security:
 
-:::image type="content" source="images/credguard.png" alt-text="Diagram of the Credential Guard architecture.":::
+:::image type="content" source="images/credential-guard-architecture.png" alt-text="Diagram of the Credential Guard architecture.":::
 
 ## Credential Guard protection limits
 
diff --git a/windows/security/identity-protection/credential-guard/images/credential-guard-architecture.png b/windows/security/identity-protection/credential-guard/images/credential-guard-architecture.png
new file mode 100644
index 0000000000..f65b8ef6aa
Binary files /dev/null and b/windows/security/identity-protection/credential-guard/images/credential-guard-architecture.png differ
diff --git a/windows/security/identity-protection/credential-guard/images/credguard.png b/windows/security/identity-protection/credential-guard/images/credguard.png
deleted file mode 100644
index 170e84a3cd..0000000000
Binary files a/windows/security/identity-protection/credential-guard/images/credguard.png and /dev/null differ