VBS (Virtualization based security) are not running for Windows 11

[VirtualHD]

Try to install Windows 11 with Security features enabled on Proxmox but installer failed because VBS is not running.
Added EFI Disk, TPM2.0, Secure Boot on a q35 Proxmox VM but can´t find any setup with enable the needed security feature. Running PVE on new Hardware Generation HPE DL360 Gen11 with Intel Platinum 8562Y on PVE Version 8.3.3 with actually firmware and bios version.
MSInfo32 show Secure boot state ON, But Virtualization-based security message will be "Enabled but not running"
Also Virtualization-based security Service will list no features.

Any idea which settings are missing to provides this services and features for VBS support?

 

[_gabriel]

I don't get the point of getting VBS in VM.
Remember VBS require nested Hyper-V virtualization within VM.
It's slowdown VM already slowdown by virtualization overhead.

 

[VirtualHD]

@_gabriel: Fully agree with you VBS will slowdown the performance but if this will be an company security policy if have to search for an solution to bring this features also available on a Proxmox VM. It´s already running fine with VBS on a vSphere VM since years, but this should be now also handled by a PVE VM.
So do you have any inputs what the problem could be, or how i can solve it?

 

[_gabriel]

https://pve.proxmox.com/wiki/Nested_Virtualization

 

[gfngfn256]

Have you set in PVE, VMID, Hardware, Machine & vIOMMU: to VirtIO ?

 

[VirtualHD]

https://pve.proxmox.com/wiki/Nested_Virtualization

I already checked if nested virtualization is enabled on PVE. And YES, it is
cat /sys/module/kvm_intel/parameters/nested

Y

 

[VirtualHD]

Have you set in PVE, VMID, Hardware, Machine & vIOMMU: to VirtIO ?

@gfngfn256: Yes, i already tried it before with vIOMMU VirtIO and also with Default (none). No changes between this methods. OS still list VBS with "Enabled but not running" as on Screenshot :-(

 

[_gabriel]

Just tried within Win11 24H2 VM, enabling Hyper-V features from appwiz.cpl enable VBS.