Intel trusted execution technology

[Leli]

Hello
I have a new laptop and I would like to enable secure launch and I saw online I need to enable Intel txt.
1. Do I really need to enable Intel txt?
2. how can I enable intel txt - I have an Asus laptop with intel core ultra 7 155h ) (vpro)?

[AlHill]

In your BIOS on this l;aptop, all you need to enable is "SECURE BOOT".  Look in the bios for this option.

Doc (not an Intel employee or contractor)
[Fear and the desire for control are primary motivators for shadow dwellers. ]

[Leli]

Hello
I already enabled secure boot.
But secure launch stilll doesn't work. Do I need to enable something else?

[DeancR_Intel]

Hi Leli,

Thank you for posting in the Community!

I understand that you have a laptop. Since this is an OEM (Brand) original equipment manufacturer device, please take into consideration that our support may be limited since we are not familiar with the technology, settings, customizations, custom drivers, and features that the OEM has designed and installed your system, nevertheless, I will do my best to assist you with your concern.

Please share more details about the issue so we can assist you effectively.

• What kind of tasks do you primarily use your laptop for (e.g., work, gaming, development, multimedia)?
• Are you handling any sensitive or confidential data that requires enhanced security measures?
• Do you use any specific software or applications that might benefit from the added security of Intel TXT?
• Are you planning to run virtual machines or use any virtualization software on your laptop?

Best regards,

Dean R.

Intel Customer Support Technician

[Leli]

Hello,
My primary tasks are work related. I am running VMs.

[DeancR_Intel]

Hi Leli,

What is the specific application you use for Virtual Machine?

Best regards,

Dean R.

Intel Customer Support Technician

[Leli]

I'm using hyper v. Could hyper v prevent txt from enabling? In event viewer I see the following log: System Guard enabled but not supported. Reason: TXT is disabled by the BIOS in MSR_FEATURE_CONTROL.
Do I need to enable intel VT - d? What can I do?

[DeancR_Intel]

Hi Leli,

I see that Secure Boot is enabled, but Secure Launch is not working. Could you please provide screenshots of the current settings for secure launch?

For more information about Intel Virtualization, please see the link for reference:

Does My Processor Support Intel® Virtualization Technology?

Best regards,

Dean R.

Intel Customer Support Technician

[Leli]

Hello, 

My Intel core ultra 7 155h supports VT - x, VT - d and txt. 

My secure launch configuration is set to enabled in the group policy. 

[DeancR_Intel]

Hi Leli,

Thank you for this information however, I would like to request for a photo or screenshot for further investigation.

Best regards,

Dean R.

Intel Customer Support Technician

[DeancR_Intel]

Hi Leli,

I wanted to follow up on the previous message regarding your inquiry. Have you had a chance to review it? If you have any questions or need further information, please let me know.

Best regards,

Dean R.

Intel Customer Support Technician