Build 22621 "Standard hardware security not supported" In Device Security

[RHP]

Hello, I confirm that it is not solved in 22621.105, greetings.

[itomirai]

On 15/06/2022 at 23:40, ahmedshujah123 said:

I'm on the release preview. The problem persists for now. It's not fixed yet anywhere that means bummer.

Yeah it seemed like they didn't update Windows Security (Microsoft.SecHealthUI) in these builds. It is still the same 22621.1 build. Moreover 22621.105 doesn't even have a changelog.

[itomirai]

https://www.elevenforum.com/t/app-browser-control-section-is-completely-missing-from-windows-security-center.6725/page-2

 

Someone on elevenforum found a workaround (reinstall the 21H1 version of Windows Security). As this is the older version you won't be able to see the toggle for Smart App Control. Tbh SAC is disabled on "upgrade" system and can't be enabled unless you reset/reinstall Windows so not that important. 

[hellowalkman Reporter]

On 16/06/2022 at 10:32, itomirai said:

Moreover 22621.105 doesn't even have a changelog.

yep still nothing https://www.neowin.net/news/microsoft-quietly-outs-windows-11-22h2-build-22621105-kb5014688-to-release-preview/

[nekrosoft13]

On 22/06/2022 at 04:39, itomirai said:

https://www.elevenforum.com/t/app-browser-control-section-is-completely-missing-from-windows-security-center.6725/page-2

 

Someone on elevenforum found a workaround (reinstall the 21H1 version of Windows Security). As this is the older version you won't be able to see the toggle for Smart App Control. Tbh SAC is disabled on "upgrade" system and can't be enabled unless you reset/reinstall Windows so not that important. 

thanks! will try that

[F.G.]

On 27/05/2022 at 08:58, nekrosoft13 said:

I rolled back to 22000, and everything is restored, same PC, not only do I meet the standard hardware security, I meet the enhanced hardware security

 

 

There is definitely  a bug in 22621 (final) 22H2 build.

 

 

I got the same problem on 2 machines upgraded from 22000.778 to 22621.105 or 22621.160.  Both show the same message, while they were fine with 22000.xxx

Also got the same issue after upgrading from 22000.778 to Dev Build 25140 or 25145.

 

 

Edited June 28, 2022 by F.G.

[F.G.]

It turns out that my machines that failed with security have one thing in common they all received a Windows security platform update KB5007651 before they were upgraded to from 22000.778 to 22621.

They have this folder in C:\Windows\System32\SecurityHealth\1.0.2109.27002-0.

If I delete that folder 1.0.2109.27002-0 with all its contents before doing the upgrade to 22621 then the two security problems reported do not occur.

I repeated the same process in 2 machines that had these 2 issues, and the problems went away.

1) "Standard hardware security not supported" showing in Device security.

2) "App & browser control" was missing in the security page.

 

With the upgrade from 22000.778 to 22621.105 after deleting the folder C:\Windows\System32\SecurityHealth\1.0.2109.27002-0 mentioned earlier,

now the security screens look normal as expected.

 

 

 

 

[F.G.]

On 28/06/2022 at 21:09, F.G. said:

It turns out that my machines that failed with security have one thing in common they all received a Windows security platform update KB5007651 before they were upgraded to from 22000.778 to 22621.

They have this folder in C:\Windows\System32\SecurityHealth\1.0.2109.27002-0.

If I delete that folder 1.0.2109.27002-0 with all its contents before doing the upgrade to 22621 then the two security problems reported do not occur.

I repeated the same process in 2 machines that had these 2 issues, and the problems went away.

1) "Standard hardware security not supported" showing in Device security.

2) "App & browser control" was missing in the security page.

 

 

 

We could also verify that deleting C:\Windows\System32\SecurityHealth\1.0.2109.27002-0, if present, after already upgrading to Build 22621 or 25140 eliminates the 2 problems describe above.

[nekrosoft13]

will try that tonight

[nekrosoft13]

that definitely does work

[Spyder Veteran]

just found this thread by google   i'm on 22h2 build 22621.232 and getting this message in security center as well.  is this still an outstanding bug to be fixed?  the memory integrity is on i just cant access it thru the GUI.

[Steven P. Administrators]

On 03/08/2022 at 15:31, Malechai said:

just found this thread by google   i'm on 22h2 build 22621.232 and getting this message in security center as well.  is this still an outstanding bug to be fixed?  the memory integrity is on i just cant access it thru the GUI.

I think Microsoft stated that the default behavior is to apply the policy only on a clean install, but I may be mistaken.

 

It is why that trick works with deleting C:\Windows\System32\SecurityHealth\1.0.2109.27002-0 AFAIK.

[Spyder Veteran]

10-4.  deleted that subfolder and all is well again.  cheers

[adrynalyne]

On 03/08/2022 at 06:53, Steven P. said:

I think Microsoft stated that the default behavior is to apply the policy only on a clean install, but I may be mistaken.

 

It is why that trick works with deleting C:\Windows\System32\SecurityHealth\1.0.2109.27002-0 AFAIK.

I learn something new every day.

[nekrosoft13]

On 03/08/2022 at 08:31, Malechai said:

just found this thread by google   i'm on 22h2 build 22621.232 and getting this message in security center as well.  is this still an outstanding bug to be fixed?  the memory integrity is on i just cant access it thru the GUI.

so far the only know fix is to delete the folder, no official fix from microsoft yet.

[ahmedshujah123]

The problem is fixed as of yesterday with a Windows Security Platform Update.

KB5007651 (Version 1.0.2207.20002)

[glenvee]

It's now December, and I am seeing the same missing security page for App and Browser Controls, and the message stating the laptop does not meet Standard Hardware Security, after resetting my sister's laptop.  However there are no files or folders inside the SecurityHealth folder, so nothing to delete.  This is with hidden files and protected files visible in File Explorer.
No way I can find to work around this bug, that seems to affect some Windows 11 systems that have been reinstalled or reset.
Her OS is 21H2  Build 22000.1281

[Maison da Silva]

Same problem in Beta 22H2 22623.1037

I'm seeing this in beta now, it appears today, computer 100% compatible with Windows 11, can anyone tell me if this is a known issue?

It was normal since installing Windows 11 and today I see this

AMD 5700G and ASUS TUF B550 WIFI PLUS

TPM 2.0

Secure Boot Enable

 

[DeusVult]

Hello there,

Same crazy problem, everything is updated and working well, might it be because I reseted windows? and if it's so, does anybody has a solution for this?

 

BIOS Updated

TPM 2 working

UEFI ok

Secure Boot ok

DEP ok

[Maison da Silva]

On 24/12/2022 at 09:03, DeusVult said:

Hello there,

Same crazy problem, everything is updated and working well, might it be because I reseted windows? and if it's so, does anybody has a solution for this?

 

BIOS Updated

TPM 2 working

UEFI ok

Secure Boot ok

DEP ok

I solved it by installing an older version of Windows Security, for some reason a buggy Dev version was released. If you wish, I can post the file link to the Microsoft server. And for some reason we got this incorrect version.

What version use? Beta Dev?

Edited December 24, 2022 by Maison da Silva

[Raulll03]

Hi everyone! I have a problem with the hardware security standard, because it's not supported. I reset my laptop due to personal issues, but before resetting it the standard hardware security was supported. My laptop has all the latest updates installed, Windows 11 Home 22H2 22621.1265. 

Do you know how I could proceed? 

 

[nekrosoft13]

if you have this folder C:\Windows\System32\SecurityHealth\1.0.2109.27002-0

 

delete it

[Student111]

Hello 

Most probably the computer hardware which you purchased is some years old and such hardwares have compatibility with TPM version 2 but it is I think disabled by default .

You have to enable it in the hardware . Check the bios settings of your computer .

 

Also pls check this article :

https://support.microsoft.com/en-us/windows/enable-tpm-2-0-on-your-pc-1fd5a332-360d-4f46-a1e7-ae6b0c90645c

 

i hope this helps 

[Student111]

On 25/02/2023 at 00:27, nekrosoft13 said:

if you have this folder C:\Windows\System32\SecurityHealth\1.0.2109.27002-0

 

delete it

why should hee delete this folder ? Inorder to do that he has to access the registry of windows 11 . 
 

Do you think this is right thing to do ?

 

[victorios]

Ok After reset my Windows 11 computer. I have take this error message. I have buy my computer with Windows 11 preinstalled. But last week when reset my computer i taking error message pour hardware is not supported etc ... And i go into constructor website of my computer i download and install the uefi. I have same bios / uefi version just i have reinstalled this.