Windows 11 Home - Local Security Authority protection is off

[Manaphy0220]

A yellow triangle appeared on the Windows Security iron yesterday. It says that Local Security Authority protection is off. Your device may be vulnerable.

I can press Go to settings or Dismiss but when I click go to settings, a notification saying "the page You want to access doesn't contain required functions and is unavailable". 

There is also no option to turn the protection on in the Device Security panel (there is only "dismiss" option). There is also a text saying that standard device security is not supported in the Device security panel.

When I was looking at it yesterday, there was also a notification that "The tpm module is unavailable" but today it doesn't show. I checked the device manager and uefi and both say that the tpm is enabled.

What should I do?

Edited March 17 by Manaphy0220

[Porthos]

Basically, it is a new bug. Ignore it until Microsoft fixes it.

[Manaphy0220]

@Porthos

Is it? Thanks You. I was looking a bit and found an advice to turn on SMV in CPU settings in BIOS (i have it disabled). I didn't want to do it without consultation with someone smarter in the topic than me.

So, should I turn it on or just ignore it and do nothing as You've already said? There is an option to "dismiss" the notification about the device security panel but it's probably better not to and just wait?

Edited March 17 by Manaphy0220

[Porthos]

I would not make any changes at this time. I have the same issue in my Win 11 VM.

[Manaphy0220]

Thank You. So I'll wait for Microsoft to fix it or until You or other expert here says to do something when more is known about the issue.

Edit: That's how it looks in my Panel

Edited March 20 by Manaphy0220

[Manaphy0220]

Are there any updates on the topic?

[Porthos]

10 minutes ago, Manaphy0220 said:

Are there any updates on the topic?

https://www.elevenforum.com/t/enable-or-disable-local-security-authority-lsa-protection-in-windows-11.11104/#Four

Quote

After installing "Update for Microsoft Defender Antivirus antimalware platform - KB5007651 (Version 1.0.2302.21002)", you might receive a security notification or warning stating that "Local Security protection is off. Your device may be vulnerable." and once protections are enabled, your Windows device might persistently prompt that a restart is required. Important: This issue affects only "Update for Microsoft Defender Antivirus antimalware platform - KB5007651 (Version 1.0.2302.21002)". All other Windows updates released on March 14, 2023 for affected platforms (KB5023706 and KB5023698), do not cause this issue.

Workaround: If you have enabled Local Security Authority (LSA) protection and have restarted your device at least once, you can dismiss warning notifications and ignore any additional notifications prompting for a restart. You can verify that LSA protection is enabled by looking in Event Viewer using the information available here. Important: Currently, Microsoft does not recommend any other workaround for this issue.

You can use Option Two or Option Four below to enable LSA without the warning.

Next steps: Microsoft is working on a resolution and will provide an update as soon as it is available.

Affected platforms:

Client: Windows 11, version 22H2; Windows 11, version 21H2

 

[Manaphy0220]

So basically, I can check if it's working and have to wait till Microsoft fixes this?

[Porthos]

13 minutes ago, Manaphy0220 said:

So basically, I can check if it's working and have to wait till Microsoft fixes this?

Exactly.

[Manaphy0220]

5 hours ago, Porthos said:

Exactly.

I tried checking the WinInit by typing it in the Windows search bar. The file doesn't launch when opened normalyl and says that Windows can't access it and that I may not have permission to access it when launched as an administrator.

Have I done something wrong?

Edited April 16 by Manaphy0220

[Porthos]

22 minutes ago, Manaphy0220 said:

Have I done something wrong?

You need to search the event viewer.

[Manaphy0220]

14 hours ago, Porthos said:

You need to search the event viewer.

Ok, thanks. So it's not strange that I couldn't open that WinInit found via Windows search bar?

[Porthos]

1 minute ago, Manaphy0220 said:

So it's not strange that I couldn't open that WinInit found via Windows search bar?

No, it is not. You need to open the event viewer to search in there.