Windows 10/11 core isolation prevents the driver from loading

[androidacy-user]

Describe the bug
With core isolation (memory integrity) turned on, the kernel driver will not load, with windows presenting a popup saying that it's been blocked due to a vulnerability in the driver. The learn more button leads to a microsoft page on core isolation.

To Reproduce
Steps to reproduce the behavior:

1. Enable driver loading
2. Reboot

Expected behavior
Driver loads fine regardless of device security settings.

Screenshots
n/a

Desktop (please complete the following information):

• OS: Windows
• Version: 11/Insider build

Additional context
Please, do not just suggest disabling core isolation. Microsoft already did that, and it's never a good idea to say just disable these core windows security features for our software to work fully.

[dmex]

windows presenting a popup saying that it's been blocked due to a vulnerability in the driver

Why hasn't Microsoft reported any vulnerabilities, contacted anyone or published anything about this?

never a good idea to say just disable these core windows security features

Microsoft hard-coded copies of our binary certificates into the Windows kernel CI and they cannot be removed from the operating system. It's been done entirely in secret without anyone knowing about it and I've tried contacting them but Microsoft hasn't replied or given an explanation or reasons for doing this yet.

[androidacy-user]

Meant to comment not close, sorry lol

Anyway

Unfortunately I don't really know more than I posted originally. The last time I got a notice like that, it was windows 10 and an old driver that wasn't compatible with memory isolation. But that was awhile ago and doesn't make sense in this case.

[kristibektashi]

Microsoft hard-coded copies of our binary certificates into the Windows kernel CI and they cannot be removed from the operating system. It's been done entirely in secret without anyone knowing about it and I've tried contacting them but Microsoft hasn't replied or given an explanation or reasons for doing this yet.

Because you are competition to them. They have their own tool for viewing processes called Task ManagerProcess Explorer

[dmex]

Because you are competition to them. They have their own tool

The reason they've provided us for blocking our driver is for the exact same feature bundled with Process Explorer. To say this isn't anti-competitive and illegal would be an understatement.

[Bartolomeus-649]

on my machine (Microsoft Windows [Version 10.0.19043.1348]) the kernel driver does not show up as problematic, still, I have other drivers preventing enabling memory integrity:

[dmex]

#1142 (comment)