Update to disable and remove the RemoteFX vGPU component in Windows

Update to disable and remove the RemoteFX vGPU component in Windows

Applies to: Windows 7 Service Pack 1, Windows Server 2012, Windows 8.1, Windows 10, Windows 10 version 1607 all editions, Windows 10 version 1703 all editions, Windows 10 version 1709 all editions, Windows 10 version 1803 all editions, Windows 10 version 1809 all editions, Windows 10 version 1903 all editions, Windows 10 version 1909 all editions, Windows 10 version 2004 all editions

Overview

RemoteFX vGPU makes it possible for multiple virtual machines to share a physical GPU. This feature was first introduced in Windows 7 and was removed as an option for users in Windows Server 2019. The current implementation of RemoteFX vGPU appears susceptible to security vulnerabilities (see the FAQ section for CVE details). Because these newly identified vulnerabilities are architectural in nature, and the feature is already removed from newer versions of Windows, the July 14, 2020 security updates and all superseding Windows Updates will disable and remove the RemoteFX vGPU feature. Starting with the July 14, 2020 security updates, this and all superseding Windows Updates will disable the RemoteFX vGPU feature.\

Although users have the ability to re-enable RemoteFX vGPU until February 2021, we strongly encourage that users seek an alternative vGPU option.

Timeline
  • Deprecation: RemoteFX vGPU was removed with the release of Windows 10, version 1809 and Windows Server 2019.
  • Disablement: RemoteFX vGPU will be disabled in all applicable Windows platforms in the July 2020 Windows security updates (July 14, 2020).
  • Removal: RemoteFX vGPU will be removed from all applicable Windows platforms in the February 2021 Windows security updates (February 9, 2021)
Alternatives

In order to mitigate potential security risks within RemoteFX vGPU, we strongly recommend that users consider using an alternative vGPU technology.

Secure GPU virtualization is available through Discrete Device Assignment (DDA) in Windows Server LTSC releases (Windows Server 2016, Windows Server 2019) and Windows Server SAC releases (Windows Server, version 1803 and later versions).

How to re-enable RemoteFX vGPU

For Windows 10, version 1803 and earlier versions
  1. To configure RemoteFX vGPU, add the RemoteFX 3D graphics adapter to the virtual machine (VM). For more information, see Configure the RemoteFX vGPU 3D adapter.
  2. To configure the RemoteFX vGPU 3D adapter, use one of the following methods:
​
Method 1: Configure RemoteFX vGPU with Hyper-V Manager ​
​
To configure the RemoteFX vGPU 3D by using Hyper-V Manager, follow these steps:​
  1. Stop the VM if it's currently running.
  2. Open Hyper-V Manager and navigate to VM Settings, and then select Add Hardware.
  3. Select RemoteFX 3D Graphics Adapter, and then select Add.
Method 2: Configure RemoteFX vGPU with PowerShell cmdlets​
​
To configure the RemoteFX vGPU 3D adapter, you must use the following PowerShell cmdlets:​
Frequently asked questions

What is the current level of support Microsoft will provide for RemoteFX vGPU?
We will provide technical assistance for users who want to re-enable RemoteFX vGPUuntil February 2021. We will not continue to ship security or nonsecurity updates for RemoteFX vGPU.

What will happen to my VM with RemoteFX vGPU enabled on July 14, 2020?
  • If the VM is in a Saved state, you will see the following error message and will be required to remove the RemoteFX adapter to resume:The virtual machine cannot be started because the server has insufficient GPU resources.
  • If the VM is in a Shutdown state, there is no error message.
  • If the VM is in a Start state, you will see an error message upon a Restart.
What are the alternatives to RemoteFX vGPU?
Secure GPU virtualization is available through Discrete Device Assignment (DDA) in Windows Server LTSC releases (Windows Server 2016 and Windows Server 2019) and Windows Server SAC releases (Windows Server, version 1803 and later versions). If you are on a Windows version earlier than Windows 10, version 1607, please consider upgrading.

What security vulnerabilities am I susceptible to if I re-enable RemoteFX vGPU?
Please refer to the following CVEs for more information:
Are any other RemoteFX features affected by this disablement?
No. RemoteFX vGPU is the only RemoteFX feature being disabled.
Click to expand...


Source: https://support.microsoft.com/en-us...isable-and-remove-the-remotefx-vgpu-component microsoft.jpg
 
Last edited by a moderator:
Click to expand...
You must log in or register to reply here.
Back
Top