The Local Security Authority protection is off - Windows 11 Home

Anonymous
2023-03-17T06:10:20+00:00

A yellow triangle appeared on the Windows Security iron yesterday. It says that Local Security Authority protection is off. Your device may be vulnerable.

I can press Go to settings or Dismiss but when I click go to settings, a notification saying "the page You want to access doesn't contain required functions and is unavailable". 

There is also no option to turn the protection on in the Device Security panel (there is only "dismiss" option).

When I was looking at it yesterday, there was also a notification that "The tpm module is unavailable" but today it doesn't show. I checked the device manager and uefi and both say that the tpm is enabled.

I've found an advice to turn on SMV in UEFI (in the CPU settings) to solve the problem but I don't want to change anything in BIOS without consultation as I'm no expert. I've also found a reply from a truste source that this whole problem is a Microsoft bug and it's better to just wait till they fix it.

What should I do?

Screenshots are in Polish, I hope they can be useful somehow. The first one shows the notification about a page being not available and the second shows the Device security panel (the notification from the first screenshot displays when I close the device security page or when I click on "go to settings" below the information that the protection is turned off). There is also an information (second screenshot) that "standard device security is not supported".

Windows for home | Windows 11 | Security and privacy

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments No comments
Answer accepted by question author
Anonymous
2023-07-06T07:36:56+00:00

Microsoft have just posted that they have resolved the "Local Security Authority protection is off" issue in an update. Has anyone tried to apply it from Windows Update?

Resolution: This issue was resolved in an update for Windows Security platform antimalware platform KB5007651 (Version 1.0.2306.10002). If you would like to install the update before it is installed automatically, you will need to check for updates.

Was this answer helpful?

10+ people found this answer helpful.
0 comments No comments

174 additional answers

Sort by: Newest
  1. Anonymous
    2023-03-25T07:42:26+00:00

    They are not from Microsoft. They are volunteers and independent moderators. Nothing to do with Microsoft at all.

    Was this answer helpful?

    10+ people found this answer helpful.
    0 comments No comments
  2. Sumit 44,306 Reputation points Volunteer Moderator
    2023-03-25T07:34:20+00:00

    Isn't it funny that NOT ONE PERSON FROM MICROSOFT has acknowledged this issue? Not one.

    Look at the replies on the first page carefully.

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments No comments
  3. Anonymous
    2023-03-25T07:26:19+00:00

    I refuse to mess about with the registry. All this talk of ftpm, tpm, the vast of majority have absolutely no idea what you're talking about!

    This problem should be fixed very easily with a windows update, NOT by asking customers to change settings in the registry. This is a Windows error and it's microsofts responsibility to fix it. Everyone's security right now is at a massive risk and no doubt ransomware and spyware crooks are hard at work infecting people's machines. Perhaps this is deliberate from Microsoft so people then go out and buy new, updated pc's?

    Isn't it funny that NOT ONE PERSON FROM MICROSOFT has acknowledged this issue? Not one.

    Absolute joke!

    Was this answer helpful?

    40+ people found this answer helpful.
    0 comments No comments
  4. Anonymous
    2023-03-24T22:14:57+00:00

    This totally works but it WILL disable your TPM when done!!! (Regardless of what your TPM BIOS settings are set to.)

    To have everything fully functional/working correctly after making the above Registry changes you need to reboot your PC into your BIOS, fully disable your board's fTPM, and then save & exit and let Windows boot up.

    Then after Windows has fully booted, reboot the PC back into the BIOS one last time and re-enable the board's fTPM, then save & exit. This should have the TPM fully enabled & functional again in Windows once it boots up, which can be quickly verified by checking the "Device security" tab of the Windows Security settings menu.

    Was this answer helpful?

    5 people found this answer helpful.
    0 comments No comments