Driver Problems? Questions? Issues?
Put OSR's experience to work for you! Contact us for assistance with:
  • Creating the right design for your requirements
  • Reviewing your existing driver code
  • Analyzing driver reliability/performance issues
  • Custom training mixed with consulting and focused directly on your specific areas of interest/concern.
Check us out. OSR, the Windows driver experts.

On-Access, Transparent, Per-File Data Encryption:

OSR's File Encryption Solution Framework (FESF) provides all the infrastructure you need to build a transparent file encryption product REALLY FAST.

Super flexible policy determination and customization, all done in user-mode. Extensive starter/sample code provided.

Proven, robust, flexible. In use in multiple commercial products.

Currently available on Windows. FESF for Linux will ship in 2018.

For more info: https://www.osr.com/fesf

Go Back   OSR Online Lists > ntfsd
Welcome, Guest
You must login to post to this list
  Message 1 of 2  
02 Feb 18 18:51
Jimmy James
xxxxxx@gmail.com
Join Date: 15 Aug 2007
Posts To This List: 27
Control Flow Guard

All, I'm looking for information on Control Flow Guard (CFG). Specifically, I'm wondering how widely it is supported for kernel mode drivers. In my search I found the very userful post from Ken Johnson ( https://www.osronline.com/showthread.cfm?link=283374) which seems to state that CFG is only supported for OSes hosted by hypervisor when HVCI is enabled. I'm wondering if anyone has any updated information on this. TIA! --
  Message 2 of 2  
06 Feb 18 02:35
Ken Johnson
xxxxxx@valhallalegends.com
Join Date: 24 Jul 2008
Posts To This List: 229
Control Flow Guard

If you are speaking about the OS side of things, the situation hasn’t since changed : Kernel mode CFG requires HVCI to be enabled in order for kernel CFG to be enforced. (The root partition is also allowed to enable HVCI, and often does for client scenarios that involve HVCI, for example; HVCI is not a guest OS only capability.) User mode CFG is independent of HVCI (though it does require NX enforcement for CFG to be effective; note that Windows has required processors to support NX for several releases now, and virtually all modern processors released in well over the last 10 years support NX). Drivers and apps built with CFG instrumentation will work fine on old OS’s, or in configurations without CFG being enforced. The CFG instrumentation only “lights up” when paired with an OS with CFG enabled that wires up the support when loading images. Otherwise, the instrumentation is effectively a no-op if the image is used in a “CFG-unaware” environment. - Ken From: xxxxx@lists.osr.com [mailto:xxxxx@lists.osr.com] On Behalf Of JIm james <xxxxx@gmail.com> Sent: Friday, February 02, 2018 3:50 PM To: Windows File Systems Devs Interest List <xxxxx@lists.osr.com> Subject: [ntfsd] Control Flow Guard All, I'm looking for information on Control Flow Guard (CFG). Specifically, I'm wondering how widely it is supported for kernel mode drivers. In my search I found the very userful post from Ken Johnson (https://www.osronline.com/showthread.cfm?link=283374<https://na01.safelinks.prot ection.outlook.com/?url=https%3A%2F%2Fwww.osronline.com%2Fshowthread.cfm%3Flink%3 D283374&data=01%7C01%7C%7C3eca4bd8557b4b12397f08d56a97d281%7Cf62b632944a24271bcc1 ea45807ab854%7C1&sdata=emAwSyAxtswhL5pGYu6duXwkPt2cZKnlz0XUrrynz8k%3D&reserved=0> ) which seems to state that CFG is only supported for OSes hosted by hypervisor when HVCI is enabled. I'm wondering if anyone has any updated information on this. TIA! --- NTFSD is sponsored by OSR MONTHLY seminars on crash dump analysis, WDF, Windows internals and software drivers! Details at To unsubscribe, visit the List Server section of OSR Online at
Posting Rules  
You may not post new threads
You may not post replies
You may not post attachments
You must login to OSR Online AND be a member of the ntfsd list to be able to post.

All times are GMT -5. The time now is 06:52.


Copyright ©2015, OSR Open Systems Resources, Inc.
Based on vBulletin Copyright ©2000 - 2005, Jelsoft Enterprises Ltd.
Modified under license