Windows VM Credential Guard

[stee]

I am attempting to get credential guard running inside of a Windows 10 VM on Proxmox 7.4-17. The error I am getting in the gpresult is


So I went ahead and enabled IOMMU in Proxmox by following the guide. Below is the output of: dmesg | grep -e DMAR -e IOMMU -e AMD-Vi



Output of: lsmod | grep vfio



other possible relevant info:

Secure boot is enabled in the VM.
Host Model: Dell DR4300 on latest bios


Is this just not possible at the moment with Proxmox or am I missing a step?

 

[_gabriel]

Credential Guard use hyperv virtualization so your vm will be in nested virtualization.
I'm not sure old cpu can do, even if it works perfs will not be great.

 

[sb-jw]

In principle it shouldn't be a problem, but nested virtualization also has a few downsides, which is why I would personally avoid using it.

See: https://pve.proxmox.com/wiki/Nested_Virtualization

 

[stee]

Thanks for the replies. Unfortunately for my work environment we need to have device guard enabled in order to meet CMMC compliance. Right now we use VMware at work and I can get this working. At home I use Proxmox and have been trying to demonstrate that it will work so we can potentially start moving away from VMware.

I read over the documentation on Nested_Virtualization and the output of cat /sys/module/kvm_intel/parameters/nested is Y so it looks like that is already enabled. Also the configuration of the VM is as follows.