MXRT driver is not loading due to incompatibility issues between MS Device Guard/Credential Guard and Anti-virus SW

Article number: [4565] - Legacy code: [12417]

Applicable to

Summary 

In newer versions of Windows 10, Microsoft introduced a new set of Security Suites: Credential Guard, Device Guard, and Kernel DMA protection. These security suites are designed to prevent malicious code and memory attacks from running, to keep your environment safe from security risks.

Many Anti-virus programs are also designed to do these same things as these Microsoft Security Suites. These suites installed together can be incompatible due to incorrect configuration settings or, in some cases, may not work together at all.

Here we explain one issue it can cause for the Barco hardware/software configuration.

For more information on Kernel DMA issue please click HERE

Problem

It has been identified that a conflict between Device Guard\Credential Guard and many Anti-Virus suites installed together in a system can prevent the Barco MXRT, and other 3rd party, driver\s from being loaded.

If these security suites are not properly configured, it can cause incompatibility issues as both are trying to perform the same functions at the same time, which can lead to issues with GPU drivers.

Troubleshooting Steps

When encountering the above described issue, these are the recommended troubleshooting steps to confirm if it is indeed the described conflict:

The 1st step is to confirm the issue is not present with DG\CG and AV not installed or enabled... The 2nd step is to confirm that it works with DG\CG without AV... and 3rd step is to confirm that it works with AV and no DG\CG.
  1. Disable\uninstall the Device Guard\Credential Guard and the Anti-Virus suite and re-install the Barco MXRT Driver:
    • Is there an image shown?
      • If Yes, then move on to step 2...
      • If not, then this is a Barco issue, and you will need to contact Barco support for further troubleshooting instructions here: 
  2. Install the Barco MXRT Driver software with Device Guard\Credential Guard enabled and no anti-virus installed.
    • Does the Barco Driver show an image?
      • If yes, then move on to step 3
      • if no, it may be a configuration issue with Device Guard\Credential Guard and will need to be investigated by your hospital IT Security.
  3. install the Barco MXRT Driver with Device Guard\Credential Guard disabled and the Anti-Virus installed and enabled.
    • Does the Barco Driver show an image?
      • If yes, then see paragraph below.
      • If no, then you will need to check your Anti-Virus Settings to be sure Barco software is not quarantined and/or whitelisted to work with the Anti-Virus. You may also need to contact the Anti-Virus administrator or customer support for assistance 

If you answered "Yes" to all of these questions, then this leads to believe that with both of the Security Suites installed, and enabled together, it is causing a conflict with the two security suites and/or configuration settings applied to them.

Solution

If it is found to be a compatibility issue between Device Guard\Credential Guard and the Anti-virus suite, Barco has created a solution in the latest MXRT Driver. You can find how to download the latest driver by following the steps in this KnowledgeBase Article HERE.

If downloading the latest driver is not possible, please understand that Barco has no control on how these suites are set within a corporate environment. You will need to contact your IT administrator for further investigation into the settings between the Security Suites, and may need intervention from the Anti-Virus manufacturer's support.

Information

More information can be found at the following:

Dell Support; Windows-10-enterprise-security-credential-guard-and-device-guard explained

Windows-10-device-guard-and-credential-guard-demystified

Introduction-to-device-guard-virtualization-based-security-and-windows-defender-application-control

Mcafee Knowledge Center

Blackberry Cylance Windows Security

Limitations in Kaspersky Anti-Virus with Device Guard enabled in Windows 10

 

 

 

 

Properties

Last updated Jul 17, 2023