From dd83620975c8c95935573b2d46571b578d516bf7 Mon Sep 17 00:00:00 2001 From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Date: Thu, 3 Oct 2024 14:57:58 -0400 Subject: [PATCH] Enclave --- .../book/hardware-security-silicon-assisted-security.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/windows/security/book/hardware-security-silicon-assisted-security.md b/windows/security/book/hardware-security-silicon-assisted-security.md index 3914ac535f..35f46f8d77 100644 --- a/windows/security/book/hardware-security-silicon-assisted-security.md +++ b/windows/security/book/hardware-security-silicon-assisted-security.md @@ -26,6 +26,8 @@ With new installs of Windows 11, OS support for VBS and HVCI is turned on by def **Hypervisor-enforced Paging Translation (HVPT)** is an overall security enhancement for the system. HVPT protects linear address translations from being tampered with, to protect sensitive system structures from write-what-where attacks. HVPT will be available on x64 machines as of Fall 2024. +### Virtualization-based security enclave + A **Virtualization-based security enclave** is a software-based trusted execution environment (TEE) inside a host application. VBS enclaves enable developers to use VBS to protect their application's secrets from admin-level attacks. VBS enclaves are available on Windows 10 onwards on both x64 and ARM64. :::image type="icon" source="images/learn-more.svg" border="false"::: **Learn more:**