Enabling Windows Credential Guard in KVM

Learn about enabling Windows Credential Guard in KVM through this 28-minute conference talk from KVM Forum. Explore the core concepts of Virtual Secure Mode (VSM), including Virtual Trust Levels, per VTL page protections, IRQ delivery, and overlay pages. Discover how Microsoft leverages these fundamentals to build security features. Gain insights into the efforts to integrate Windows Credential Guard into KVM, the challenges faced in upstreaming the feature, and potential commonalities with other virtualization-based security features. Understand the importance of this security feature, which is enabled by default in Windows 11 and becoming an industry prerequisite, and its implications for KVM support.