secure launch/firmware protection

Hello

issues with enabling secure launch on your Asus B5 B5404 with Intel Ultra 7 155H. Let's address each of your concerns step by step.

Firstly, the error message "Failed to update the SBAT value in FW" in the Event Viewer could indeed be related to secure launch not working. This error typically indicates a problem with the firmware update process, which can affect secure boot and secure launch functionalities.

Regarding the registry setting RequirePlatformSecurityFeatures being set to 3, this value is correct for enabling Virtualization-Based Security (VBS) and other platform security features. However, it's essential to ensure that all necessary firmware and hardware requirements are met for secure launch to function correctly.

To determine if your computer is capable of running secure launch, you can use the Microsoft Device Guard and Credential Guard hardware readiness tool. This tool helps assess whether your hardware meets the requirements for secure launch and other security features. Here’s how you can use it:

1. Download the Tool: You can download the Device Guard and Credential Guard hardware readiness tool from the Microsoft website.
2. Run the Tool: Extract the downloaded files and run the DG_Readiness_Tool_v3.6.ps1 script in PowerShell with administrative privileges.
3. Review the Results: The tool will generate a report indicating whether your system meets the requirements for secure launch and other security features.

Best Regards,

Yanhong

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.