Merge pull request #7723 from MicrosoftDocs/main
Publish 01/04/2023 3:30 PM PT
Before Width: | Height: | Size: 52 KiB After Width: | Height: | Size: 86 KiB |
Before Width: | Height: | Size: 168 KiB After Width: | Height: | Size: 1.5 MiB |
Before Width: | Height: | Size: 57 KiB After Width: | Height: | Size: 66 KiB |
Before Width: | Height: | Size: 168 KiB After Width: | Height: | Size: 818 KiB |
Before Width: | Height: | Size: 297 KiB After Width: | Height: | Size: 1001 KiB |
Before Width: | Height: | Size: 258 KiB After Width: | Height: | Size: 1.5 MiB |
Before Width: | Height: | Size: 259 KiB After Width: | Height: | Size: 828 KiB |
Before Width: | Height: | Size: 1006 KiB After Width: | Height: | Size: 1008 KiB |
@ -2,13 +2,13 @@
|
||||
title: Kernel DMA Protection (Windows)
|
||||
description: Kernel DMA Protection protects PCs against drive-by Direct Memory Access (DMA) attacks using PCI hot plug devices connected to Thunderbolt™ 3 ports.
|
||||
ms.prod: windows-client
|
||||
author: dansimp
|
||||
ms.author: dansimp
|
||||
author: vinaypamnani-msft
|
||||
ms.author: vinpa
|
||||
manager: aaroncz
|
||||
ms.collection:
|
||||
- highpri
|
||||
ms.topic: conceptual
|
||||
ms.date: 03/26/2019
|
||||
ms.date: 01/05/2023
|
||||
ms.technology: itpro-security
|
||||
---
|
||||
|
||||
@ -66,6 +66,9 @@ Systems released prior to Windows 10 version 1803 do not support Kernel DMA Prot
|
||||
>[!NOTE]
|
||||
>Kernel DMA Protection is not compatible with other BitLocker DMA attacks countermeasures. It is recommended to disable the BitLocker DMA attacks countermeasures if the system supports Kernel DMA Protection. Kernel DMA Protection provides higher security bar for the system over the BitLocker DMA attack countermeasures, while maintaining usability of external peripherals.
|
||||
|
||||
>[!NOTE]
|
||||
>DMA remapping support for graphics devices was added in Windows 11 with the WDDM 3.0 driver model; Windows 10 does not support this feature.
|
||||
|
||||
## How to check if Kernel DMA Protection is enabled
|
||||
|
||||
Systems running Windows 10 version 1803 that do support Kernel DMA Protection do have this security feature enabled automatically by the OS with no user or IT admin configuration required.
|
||||
|
Before Width: | Height: | Size: 59 KiB |
Before Width: | Height: | Size: 74 KiB |
Before Width: | Height: | Size: 31 KiB |
Before Width: | Height: | Size: 4.1 KiB |
Before Width: | Height: | Size: 4.5 KiB |
Before Width: | Height: | Size: 28 KiB |
Before Width: | Height: | Size: 305 KiB |
Before Width: | Height: | Size: 217 KiB |
Before Width: | Height: | Size: 9.8 KiB |
Before Width: | Height: | Size: 6.0 KiB |
Before Width: | Height: | Size: 20 KiB |
Before Width: | Height: | Size: 145 KiB |
Before Width: | Height: | Size: 318 KiB |
Before Width: | Height: | Size: 23 KiB |
Before Width: | Height: | Size: 11 KiB |
Before Width: | Height: | Size: 135 KiB |
@ -106,5 +106,5 @@ The VM host CPU must also meet Windows 11 [processor requirements](/windows-hard
|
||||
## See also
|
||||
|
||||
[Windows minimum hardware requirements](/windows-hardware/design/minimum/minimum-hardware-requirements-overview)<br>
|
||||
[What's new in Windows 11 overview](windows-11-whats-new.md)
|
||||
[What's new in Windows 11 overview](/windows/whats-new/windows-11-overview)
|
||||
|
||||
|