Enable core isolation on super image

This section describes how to enable Core Isolation and Memory Integrity on super image.

1. Enable super client on client PC.
2. On the desktop you will see a shortcut named “Core Isolation”, open it. You can find its location C:\Tools\Core Isolation. (Figure 1)

Figure 1

3. In the Core Isolation folder, merge “Turn Core Isolation Memory Integrity ON.reg”. (Figure 2)

Figure 2

4. Restart client PC
5. After restart, shut down and save the super client.

Create reg files for core isolation on your own image

1. Turn Core Isolation Memory Integrity ON.reg

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios\HypervisorEnforcedCodeIntegrity]

"Enabled"=dword:00000001

2. Turn Core Isolation Memory Integrity OFF.reg

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios\HypervisorEnforcedCodeIntegrity]

"Enabled"=dword:00000000