https://h30471.www3.hp.com/t5/you-xi-ben/an-ying-jing-ling5ru-he-da-kai-nei-heDMA-bao-hu/m-p/1076187#M50003 <P>你开了虚拟机</P> Tue, 02 Mar 2021 02:44:38 GMT y2kim 2021-03-02T02:44:38Z https://h30471.www3.hp.com/t5/you-xi-ben/an-ying-jing-ling5ru-he-da-kai-nei-heDMA-bao-hu/m-p/1075887#M49944 <P>突然发现暗影精灵5内核DMA保护是关的状态：</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="屏幕截图 2021-02-28 212633.png" style="width: 663px;"><img src="https://h30471.www3.hp.com/t5/image/serverpage/image-id/54612i6E7048E93F7194A0/image-size/large?v=v2&amp;px=999" role="button" title="屏幕截图 2021-02-28 212633.png" alt="屏幕截图 2021-02-28 212633.png" /></span></P><P>于是就查了些资料，发现驱动是支持DMA的：</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="屏幕截图 2021-02-28 212838.png" style="width: 800px;"><img src="https://h30471.www3.hp.com/t5/image/serverpage/image-id/54613i11B2290CDE359DC1/image-size/large?v=v2&amp;px=999" role="button" title="屏幕截图 2021-02-28 212838.png" alt="屏幕截图 2021-02-28 212838.png" /></span></P><P>所以就不知道为什么系统默认是关闭的？不知道有没有什么方法打开呢？谢谢啦：）</P><P>参考的相关信息：</P><P><A href="https://docs.microsoft.com/zh-cn/windows/security/information-protection/kernel-dma-protection-for-thunderbolt#%E7%94%A8%E6%88%B7%E4%BD%93%E9%AA%8Cuser-experience" target="_blank">https://docs.microsoft.com/zh-cn/windows/security/information-protection/kernel-dma-protection-for-thunderbolt#%E7%94%A8%E6%88%B7%E4%BD%93%E9%AA%8Cuser-experience</A></P><P><A href="https://docs.microsoft.com/zh-cn/windows-hardware/drivers/install/devpkey-device-dmaremappingpolicy" target="_blank">https://docs.microsoft.com/zh-cn/windows-hardware/drivers/install/devpkey-device-dmaremappingpolicy</A></P><P>&nbsp;</P> Sun, 28 Feb 2021 13:35:38 GMT https://h30471.www3.hp.com/t5/you-xi-ben/an-ying-jing-ling5ru-he-da-kai-nei-heDMA-bao-hu/m-p/1075887#M49944 Sdog 2021-02-28T13:35:38Z https://h30471.www3.hp.com/t5/you-xi-ben/an-ying-jing-ling5ru-he-da-kai-nei-heDMA-bao-hu/m-p/1076187#M50003 <P>你开了虚拟机</P> Tue, 02 Mar 2021 02:44:38 GMT https://h30471.www3.hp.com/t5/you-xi-ben/an-ying-jing-ling5ru-he-da-kai-nei-heDMA-bao-hu/m-p/1076187#M50003 y2kim 2021-03-02T02:44:38Z https://h30471.www3.hp.com/t5/you-xi-ben/an-ying-jing-ling5ru-he-da-kai-nei-heDMA-bao-hu/m-p/1076886#M50100 <P>抱歉，我没有明白您的意思。我没有使用虚拟机，但的确打开了虚拟化技术，这两应该不冲突吧，你可以参考<A href="https://docs.microsoft.com/zh-cn/windows/security/information-protection/kernel-dma-protection-for-thunderbolt#%E7%94%A8%E6%88%B7%E4%BD%93%E9%AA%8Cuser-experience" target="_self">这个链接</A>&nbsp;，其中插图也打开了虚拟化技术<span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="kernel-dma-protection" style="width: 800px;"><img src="https://h30471.www3.hp.com/t5/image/serverpage/image-id/54810i531AF7BFD97CE11E/image-size/large?v=v2&amp;px=999" role="button" title="kernel-dma-protection" alt="kernel-dma-protection" /></span></P> Fri, 05 Mar 2021 06:42:07 GMT https://h30471.www3.hp.com/t5/you-xi-ben/an-ying-jing-ling5ru-he-da-kai-nei-heDMA-bao-hu/m-p/1076886#M50100 Sdog 2021-03-05T06:42:07Z https://h30471.www3.hp.com/t5/you-xi-ben/an-ying-jing-ling5ru-he-da-kai-nei-heDMA-bao-hu/m-p/1076890#M50103 <P>可以单独再装个干净的系统看看。</P> <P>或者从微软社区找答案，毕竟是windows 系统自带的功能。</P> <P>不过这个开不开，有什么用，我不清楚。是不是值得折腾，也是要你自己考虑了。</P> Fri, 05 Mar 2021 06:48:06 GMT https://h30471.www3.hp.com/t5/you-xi-ben/an-ying-jing-ling5ru-he-da-kai-nei-heDMA-bao-hu/m-p/1076890#M50103 y2kim 2021-03-05T06:48:06Z https://h30471.www3.hp.com/t5/you-xi-ben/an-ying-jing-ling5ru-he-da-kai-nei-heDMA-bao-hu/m-p/1082122#M51029 <P>我在找了一些资料，在这个<A href="https://docs.microsoft.com/en-us/windows-hardware/design/device-experiences/oem-bitlocker#un-allowed-dma-capable-busdevices-detected" target="_self">链接</A>中建议，&nbsp;需要和咱们的技术人员沟通，注册表下的这些设备是否只涉及内部访问，如果是，则可以通过增加注册表项的方式解决。不知道能否帮忙给看看啊，谢谢咯：</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="屏幕截图 2021-03-27 220405.png" style="width: 800px;"><img src="https://h30471.www3.hp.com/t5/image/serverpage/image-id/55867iAF78771BC21D3398/image-size/large?v=v2&amp;px=999" role="button" title="屏幕截图 2021-03-27 220405.png" alt="屏幕截图 2021-03-27 220405.png" /></span></P> Sat, 27 Mar 2021 14:05:52 GMT https://h30471.www3.hp.com/t5/you-xi-ben/an-ying-jing-ling5ru-he-da-kai-nei-heDMA-bao-hu/m-p/1082122#M51029 Sdog 2021-03-27T14:05:52Z https://h30471.www3.hp.com/t5/you-xi-ben/an-ying-jing-ling5ru-he-da-kai-nei-heDMA-bao-hu/m-p/1082135#M51030 <P>测试了一下，始终不能打开DMA保护，看了看这个<A href="https://docs.microsoft.com/zh-cn/windows-hardware/design/device-experiences/oem-kernel-dma-protection" target="_self">链接</A>，感觉是系统固件就不满足下面的四个条件中的一个或多个：</P><P><SPAN>IOMMU (Intel VT-D、AMD-Vi)</SPAN></P><P><SPAN>PCI Express 本机控件支持</SPAN></P><P>预启动 DMA 保护</P><P><SPAN>ACPI 内核 DMA 保护指示器</SPAN></P><P><SPAN><span class="lia-unicode-emoji" title=":大哭:">😭</span>，技术人员能帮忙落实一下么？让我死心</SPAN></P> Sat, 27 Mar 2021 16:27:57 GMT https://h30471.www3.hp.com/t5/you-xi-ben/an-ying-jing-ling5ru-he-da-kai-nei-heDMA-bao-hu/m-p/1082135#M51030 Sdog 2021-03-27T16:27:57Z https://h30471.www3.hp.com/t5/you-xi-ben/an-ying-jing-ling5ru-he-da-kai-nei-heDMA-bao-hu/m-p/1082711#M51121 <P>如果内核&nbsp;<STRONG>DMA </STRONG><STRONG>保护</STRONG>&nbsp;的状态保持为"关闭"，则系统不支持此功能。</P><P>对于不支持内核 DMA 保护的系统，请参阅&nbsp;<A href="https://docs.microsoft.com/zh-cn/windows/security/information-protection/bitlocker/bitlocker-countermeasures" target="_blank">BitLocker</A>&nbsp;对策或&nbsp;<A href="https://thunderbolttechnology.net/security/Thunderbolt%203%20and%20Security.pdf" target="_blank">Thunderbolt?3 和 Microsoft Windows?10</A>&nbsp;操作系统上的安全性，以使用其他 DMA 保护方法。</P><P><A href="https://docs.microsoft.com/zh-cn/windows-hardware/design/device-experiences/oem-kernel-dma-protection" target="_blank">https://docs.microsoft.com/zh-cn/windows-hardware/design/device-experiences/oem-kernel-dma-protection</A>&nbsp;</P> Tue, 30 Mar 2021 09:36:30 GMT https://h30471.www3.hp.com/t5/you-xi-ben/an-ying-jing-ling5ru-he-da-kai-nei-heDMA-bao-hu/m-p/1082711#M51121 Hou-YJ 2021-03-30T09:36:30Z