Windows 10 version 1903 on ARM has gotten an additional virtualization-based security feature that creates secured regions of memory that are isolated from the operating system. These secured and isolated regions of memory can then be used by security solutions so that they are better protected from vulnerabilities in the operating system.
In Windows 10 1903 build 18362.383 and later, certain ARM devices have a Virtualization-based security feature that uses the Windows hypervisor to create isolated regions of memory from the OS.
"virtualization-based security uses the Windows hypervisor to create isolated regions of memory from the standard operating systems. Windows can use this security feature to host security solutions while providing greatly increased protection from vulnerabilities in the operating system. For more information, see Virtualization-based Security (VBS)."
This feature is only available on "ARM devices that are running on Qualcomm's Snapdragon 850 platform and later versions".
Once enabled, Microsoft states that users can run into various issues if the system is not in a secure configuration:
• Fingerprint authentication stops working because the fingerprint authentication data is cleared to
protect your privacy.
• Digital rights management (DRM)-protected videos can't be played.
If you run into these issues,
Microsoft recommends you utilize Secure Boot, disable some hypervisor features, or install the latest Windows updates.
The table below lists some of the issues that you can run into and Microsoft's recommended solutions.
source
