How to Disable HVCI/KMCI in Windows 11: A Step-by-Step Guide

Windows 11 comes with a range of security features designed to protect your system. Among them is HVCI (Hypervisor-Protected Code Integrity), also known as KMCI (Kernel-Mode Code Integrity). While these features provide extra protection against malware and unauthorized code, they can sometimes cause performance issues or prevent certain drivers and apps from working properly.

If you’re experiencing these issues, you may want to disable HVCI/KMCI in Windows 11. In this guide, we’ll walk through everything step by step.

Table of Contents

What Is HVCI/KMCI in Windows 11?

HVCI (Hypervisor-Protected Code Integrity)

Uses virtualization-based security (VBS).
Protects against malicious drivers and kernel attacks.
Prevents unsigned drivers from loading.

KMCI (Kernel-Mode Code Integrity)

Ensures only trusted code runs in kernel mode.
Blocks kernel-level malware or tampered drivers.

Together, they add strong security but may interfere with older apps, games, or drivers.

Why Disable HVCI/KMCI?

You might need to turn off HVCI/KMCI if:

A program or game won’t run because of driver compatibility issues.
You notice significant performance drops in CPU/GPU-heavy tasks.
Certain hardware drivers (e.g., for older peripherals) are blocked.

⚠️ Note: Disabling these features lowers security. Only disable them if necessary.

How to Check If HVCI/KMCI Is Enabled

Before disabling, check the status:

Press Win + R, type msinfo32, and press Enter.
In System Information, look for:
- Virtualization-based security
- Device Guard or Code Integrity status.

If enabled, you’ll see HVCI/KMCI listed as Running.

Step-by-Step: How to Disable HVCI/KMCI in Windows 11

Method 1: Through Windows Security Settings

Press Win + I to open Settings.
Go to Privacy & Security > Windows Security > Device Security.
Click Core Isolation Details.
Toggle Memory Integrity (HVCI) Off.
Restart your PC for changes to apply.

Method 2: Using Group Policy Editor (Pro & Enterprise Only)

Press Win + R, type gpedit.msc, and press Enter.
Navigate to:

Computer Configuration > Administrative Templates > System > Device Guard
Double-click Turn on Virtualization Based Security.
Select Disabled.
Click Apply > OK, then restart your computer.

Method 3: Using Registry Editor

⚠️ Registry editing can break your system if done wrong. Be careful!

Press Win + R, type regedit, and press Enter.
Navigate to:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios\HypervisorEnforcedCodeIntegrity
Double-click Enabled.
Change value from 1 (On) to 0 (Off).
Restart your PC.

Method 4: Disable via Command Prompt

Search for Command Prompt, right-click, and select Run as administrator.
Enter the following command:

bcdedit /set hypervisorlaunchtype off
Restart your system.

This disables hypervisor-related features, including HVCI.

Troubleshooting After Disabling

If a program still doesn’t run, double-check Memory Integrity status.
If Windows re-enables it automatically after updates, repeat the steps.
Keep your system protected with an updated antivirus if HVCI/KMCI is disabled.

Risks of Disabling HVCI/KMCI

Lower protection against rootkits and kernel-level attacks.
Malicious or unsigned drivers could load without restriction.
Slightly higher risk when downloading or installing unknown software.

Best Practices After Disabling

Keep Windows Defender or a trusted antivirus running.
Download drivers only from official manufacturer websites.
Avoid pirated or unverified apps.

Conclusion

Disabling HVCI/KMCI in Windows 11 can help resolve performance issues and software compatibility problems, especially with older drivers or high-performance gaming. However, it comes with security trade-offs. If you decide to disable it, follow the methods above and always practice safe browsing and software installation habits.

FAQs

Q1: Is it safe to disable HVCI/KMCI in Windows 11?
Yes, but it reduces protection against advanced malware and kernel-level threats.

Q2: Does disabling HVCI improve performance?
Yes, especially in CPU/GPU-intensive apps and games.

Q3: Will Windows updates re-enable HVCI?
Sometimes major updates reset security settings. You may need to disable it again.

Q4: Can I enable HVCI/KMCI again later?
Yes, just reverse the steps and turn Memory Integrity back on.

Q5: Do I need to disable Secure Boot to turn off HVCI?
No, Secure Boot is separate. You can keep it enabled while disabling HVCI.