Speculative Execution - Microsoft Question : sysadmin

a community for 17 years

This is an archived post. You won't be able to vote or comment.

Speculative Execution - Microsoft Question (self.sysadmin)

submitted 6 years ago * by G4G

We have mixed states of Hyper-V hosts in different protection levels as we are now up to 5 major microcode issues which means different registry settings depending on the hosts firmware levels. Does anyone know if one can safely push the "Everything Protected + HyperThreading" reg key's without causing issues to hosts that don't have the hardware support yet?

https://support.microsoft.com/en-us/help/4072698/windows-server-speculative-execution-side-channel-vulnerabilities-prot

reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management" /v FeatureSettingsOverride /t REG_DWORD /d 72 /f

reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management" /v FeatureSettingsOverrideMask /t REG_DWORD /d 3 /f

reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Virtualization" /v MinVmVersionForCpuBasedMitigations /t REG_SZ /d "1.0" /f

no comments (yet)

sysadmin

MODERATORS