How to Enable System Guard Secure Launch for Firmware Protection

With the tight integration of software, firmware, and hardware, devices, identities, and data are better protected on Microsoft Secured-core PCs. System Guard Secure Launch for Firmware Protection must be enabled before it can be used, and we will see how to do that in this post.

System Guard Safe Firmware Launch

To date, Microsoft and its OEM partners have introduced a new class of computers, Secured-core PCs, that include added protections in software. These devices leverage the hardware-enforced root of trust to boot into a clean and trusted state, minimizing exposure to firmware attacks and blocking malware assaults. They also offer protection against physical and in-person threats by restricting access to sensitive code and ensuring executables are signed by known sources.

Any of the two methods will help you enable Firmware Protection.

Enable Firmware Protection Mode via Windows Security

Enable Firmware Protection using Registry Editor

Now, let's come to their details.

1] Enable Firmware Protection via Windows Security

First of all, we will enable Firmware Protection via the Windows Security app. Here are the steps you will need to follow to do so.

Open Start Menu and search for Windows Security.

Next, click on Device Security in the left menu.

To display details of core isolation, press that part and click on the given link.

The Core isolation screen opens after that; now toggle the toggle for Firmware protection to on or off.

You will be prompted for administrator credentials or You need to click Yes if you have already set up User Account control settings.

Finally, do not forget to restart your computer.

Once the computer is booted, this is when the firmware protection kicks in. In case the grayed Firmware Protection toggle, you may want to ask your permission from the IT administrator for registry modification or have them enable it at their end.

2. On the Registry Editor, Enable Firmware Protection.

It is high time you create a backup of your registers before editing the Registry. Open Registry Editor and head to File > Export, then to a safe place to save the file. Copy and paste the following after you're done into Notepad.

Enable System Guard Secure Launch Protect Firmware

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlDeviceGuardScenariosSystemGuard]

dword:00000001 "Enabled"

Disable Firmware Protection's System Guard Secure Launch,

In the Windows Registry Editor, located in the path of, [HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlDeviceGuardScenariosSystemGuard] 5. The string value "Enabled" takes the value of a string 00000000.

Two files of different nomenclature are to be inserted and should be saved under the file extension .reg. You right click the file and can open or shut it by clicking on "Open". Then just execute the script-it automatically configures your registry as required.

We hope these steps helped with your question. Without further ado, good luck, and until next time.