Microsoft waxay soo saartay casriyeyn amni-KB4571756—kaas oo curyaamin doona muuqaalka RemoteFX vGPU sababtoo ah baylahaanshaha amniga. Waxay khusaysaa Windows 10, nooca 2004^{(Windows 10, version 2004)} , iyo dhammaan daabacadaha Windows Server nooca 2004.

Ku dhaji cusbooneysiintan, VM kasta oo leh RemoteFX vGPU karti u leh waxay ku fashilmi doontaa fariimaha khaldan ee soo socda:

• Mashiinka farsamada lama bilaabi karo sababtoo ah dhammaan GPU^(GPUs) -yada awooda RemoteFX waxay ku naafo yihiin Maamulaha Hyper-V^{(Hyper-V Manager)} .
• Mashiinka casriga ah lama bilaabi karo sababtoo ah seerfarku waxa uu leeyahay agab GPU -da oo ku filan.^(GPU)

Xitaa haddii isticmaalaha ugu dambeeya uu isku dayo inuu dib u furo RemoteFX vGPU, VM wuxuu soo bandhigi doonaa fariinta qaladka-

We no longer support the RemoteFX 3D video adapter. If you are still using this adapter, you may become vulnerable to security risk.

Waa maxay qaabka RemoteFX vGPU?

Marka la wado mishiinnada Virtual , qaabka RemoteFX v GPU wuxuu kuu ogolaanayaa inaad wadaagto GPU -ga jireed . Sifadu waxay si fiican ugu habboon tahay marka GPU -ga jirku uu aad u badan yahay kheyraadka, laakiin taa beddelkeeda, dhammaan VM-yada^(VMs) waxay si firfircoon ula wadaagi karaan GPU -da culeyska shaqadooda. Faa'iidada ayaa ah, dabcan, dhimista qiimaha GPU iyo hoos u dhigista culeyska CPU . Haddii aad rabto inaad qiyaasto, waxay la mid tahay inaad ku socodsiiso codsiyo badan oo DirectX isku mar ah isla GPU jireed . Markaa halkii aad ka iibsan lahayd 4 GPUs , hal GPUs^(GPU)caawin kara, iyadoo ku xidhan culayska shaqada. Waxa kale oo ay la timid tallaabooyin liddi ku ah oo xaddidaya isticmaalka xad-dhaafka ah ee GPU -ga jireed .

Waa maxay baylahda amni ee agagaarka RemoteFX vGPU?

RemoteFX vGPU waa da' Waxaa lagu soo bandhigay Windows 7 oo hadda waxa ay wajahaysaa nuglaanta fulinta koodka fog. Nuglaanta fulinta koodka fog ayaa jirta marka Hyper-V RemoteFX vGPU ee server-ka martida loo yahay uu ku guul daraystay inuu si sax ah u ansixiyo gelinta isticmaale la xaqiijiyay ee nidaamka hawlgalka martida. Waxay dhacdaa marka Hyper-V RemoteFX vGPU ee server-ka martida loo yahay uu ku guuldareysto inuu si sax ah u ansixiyo gelinta isticmaale la xaqiijiyay ee nidaamka hawlgalka martida marka weerarku uu ku sameeyo codsi la sameeyay oo ku saabsan OS martida, kaas oo weerara darawallada fiidiyooga ee qolo saddexaad oo ku socda Hyper -V martigeliyaha.

Marka uu weeraryahanku galo, wuxuu ku socodsiin karaa kood kasta OS-ka martida loo yahay. Maadaama ay tani tahay arrin ku saabsan dhismaha, ma jirto wax hagaajin ah.

Beddelka RemoteFX vGPU

Xulashada kaliya ayaa ah in la isticmaalo vGPU kale, kaas oo ka iman kara codsiyada dhinac saddexaad ama Microsoft waxay soo jeedinaysaa isticmaalka Qalabka Qalabaynta^{(Discrete Device Assignment)} ( DDA ). Waxay kuu oggolaaneysaa inaad dhammaan Aaladda PCIe^{(PCIe Device)} -ga geliso VM. Ma aha oo kaliya inaad u oggolaan karto gelitaanka baabuurta Graphics , laakiin sidoo kale waxaad wadaagi kartaa kaydinta NVMe .

Faa'iidada ugu weyn ee DDA marka laga reebo in ay ammaan tahay, looma baahna in lagu rakibo darawalada martida loo yahay ka hor inta aan qalabka lagu dhejin gudaha VM. Ilaa inta VM ay aqoonsan karto goobta PCIe^{(PCIe Location)} ee aaladda , Waddada^(Path) waxaa loo go'aamin karaa VM si ay ugu dhejiso. Marka la soo koobo, DDA u gudbinta GPU -ga VM waxay u oggolaanaysaa darawalka GPU -da u dhashay in lagu isticmaalo VM-ka iyo dhammaan awoodaha. Taas waxaa ku jira DirectX 12 , CUDA , iwm., kuwaas oo aan suurtagal ahayn RemoteFX v GPU .

Sida dib loogu hawlgeliyo RemoteFX vGPU

Microsoft waxay^(Microsoft) si cad uga digaysaa inaadan isticmaalin RemoteFX vGPU, laakiin haddii ay tahay inaad isticmaasho, waxaa jirta hab aad markale awood ugu yeelan karto khatartaada.

Haddii aad u malaynayso in aad mar hore habaysay RemoteFX vGPU 3D adabtarada, halkan waxaa ah faahfaahinta ku shaqayn doonta kaliya Windows 10 , nooca 1803, iyo noocyadii hore

Ku xidh RemoteFX^(RemoteFX) vGPU maamulaha Hyper-V^{(Hyper-V Manager)}

Si loo habeeyo RemoteFX vGPU 3D adoo isticmaalaya Hyper-V Manager , raac tillaabooyinkan:

• Jooji mashiinka Virtual
• Fur Maareeyaha Hyper-V^{(Hyper-V Manager)} oo u  gudub VM Settings^{(VM Settings)} .
• Guji Add Hardware.
• Dooro RemoteFX 3D Graphics Adapter , ka dibna dooro ku  dar^(Add) .

Ku xidh RemoteFX^(RemoteFX) vGPU oo wata PowerShell cmdlets

• Daar-VMRemoteFXPhysicalVideoAdapter
• Kudar-VMRemoteFx3dVideoAdapter
• Hel-VMRemoteFx3dVideoAdapter
• Deji-VMRemoteFx3dVideoAdapter
• Hel-VMRemoteFXPhysicalVideo Adapter

Waxaad ka akhriyi kartaa wax badan oo ku saabsan halkan Microsoft.^{(about it here on Microsoft.)}

Windows 10 disables support for RemoteFX vGPU; Can you re-enable it?

Microsoft has released a ѕecurity update—KB4571756—which will disable thе RemoteFX vGPU feature because of a security vulnerability. It applies to Windows 10, version 2004, and all editions Windows Server version 2004.

Post this update, any VM that has RemoteFX vGPU enabled will fail with the following error messages:

• The virtual machine cannot be started because all the RemoteFX-capable GPUs are disabled in Hyper-V Manager.
• The virtual machine cannot be started because the server has insufficient GPU resources.

Even if the end-user tries to re-enable the RemoteFX vGPU, the VM will display the error message—

We no longer support the RemoteFX 3D video adapter. If you are still using this adapter, you may become vulnerable to security risk.

What is the RemoteFX vGPU feature?

When running Virtual Machines, the RemoteFX vGPU feature lets you share the physical GPU. The feature fits well when physical GPU is too much of a resource, but instead, all VMs can dynamically share the GPU for their workload. The advantage is, of course, the reduction in the cost of GPU and decreasing CPU load. If you want to imagine, it is like running multiple DirectX applications at the same time on the same physical GPU.  So instead of buying 4 GPUs, one GPU could help, depending on the workload. It also came with countermeasures that restricted the overuse of physical GPU.

What is the security vulnerability around RemoteFX vGPU?

RemoteFX vGPU is old. It was introduced in Windows 7 and is now facing a remote code execution vulnerability. A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest operating system. It happens when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest operating system when an attacker runs a crafted application on a guest OS, which attacks individual third-party video drivers running on the Hyper-V host.

Once the attacker has access, he can run any code on the host OS. Since this is an architectural issue, there is no fix for it.

Alternatives to RemoteFX vGPU

The only option is to use an alternate vGPU, which could be from third-party applications or Microsoft suggests using Discrete Device Assignment (DDA). It allows you to entire PCIe Device into a VM. Not only can you allow access to Graphics cars, but you can also share NVMe storage.

The biggest advantage of DDA apart from that it’s secure, there is no need to install drivers on the host before the device being mounted within the VM. As long as VM can identify the device’s PCIe Location, the Path can be determined for the VM to mount it. In short, DDA passing a GPU to a VM allows the native GPU driver to be used within the VM and all capabilities. That includes DirectX 12, CUDA, etc., which was not possible with RemoteFX vGPU.

How to re-enable RemoteFX vGPU

Microsoft clearly warns that you should not be using the RemoteFX vGPU, but if you have to, there is a way to enable it again at your own risk.

Assuming you have already configured the RemoteFX vGPU 3D adapter, here are the details that will work only on Windows 10, version 1803, and earlier versions

Configure RemoteFX vGPU with Hyper-V Manager

To configure the RemoteFX vGPU 3D by using Hyper-V Manager, follow these steps:

• Stop the Virtual Machine
• Open Hyper-V Manager and navigate to VM Settings.
• Click on Add Hardware.
• Select RemoteFX 3D Graphics Adapter, and then select Add.

Configure RemoteFX vGPU with PowerShell cmdlets

• Enable-VMRemoteFXPhysicalVideoAdapter
• Add-VMRemoteFx3dVideoAdapter
• Get-VMRemoteFx3dVideoAdapter
• Set-VMRemoteFx3dVideoAdapter
• Get-VMRemoteFXPhysicalVideoAdapter

You can read more about it here on Microsoft.

Related posts

• Sida loo isticmaalo oo loogu daro Xisaabaadka Shaqada/Dugsiga ee Microsoft Authenticator app

• Sida loo joojiyo fasalada kaydinta la saari karo iyo gelida gudaha Windows 10

• Tirtir faylalka si joogto ah adigoo isticmaalaya barnaamijka File Shredder ee bilaashka ah ee Windows

• Tiny Security Suite wuxuu kaa caawinayaa inaad sir, jar jarto, oo aad ilaaliso faylasha ku jira PC gaaga

• Sida dib loogu dajiyo abka Windows Security gudaha Windows 11/10

• Sida loo furo Xarunta Amniga Windows gudaha Windows 11/10

• Sida loo damiyo ogaysiisyada Nabadgelyada iyo Dayactirka gudaha Windows 11/10

• Fasaxyada Nabadgelyada Internetka ee Fasaxa - Sida loo ilaaliyo ammaan marka aad fasaxayso

• Windows Security waxay leedahay Aan Bixiyeyaal Ammaan ku jirin Windows 11/10

• Ku ilaali Diiwaanka Bootka Master-ka ee kombuyuutarkaaga sifeeyaha MBR

• Hubinta Ammaanka Khibradda Daalacanka: Sidee buu ammaan u yahay browserkaagu?

• 10ka Habayn Soo Dhawayn ee ugu Wanaagsan ee Amniga iyo Qarsoonaanta

• Software-ka ugu Wacan ee Badbaadada Internetka ee Bilaashka ah ee Windows 11/10 PC

• Rogue Security Software ama Scareware: Sida loo hubiyo, looga hortago, looga saaro?

• Sida dib loogu dejiyo ogolaanshaha faylka NTFS gudaha Windows 10

• Sida loo ilaaliyo badbaadada mareegaha: hanjabaadaha iyo la tacaalida dayacanka

• Sida loo sugo WiFi-gaaga - ogow cidda ku xidhan

• Sida loo isticmaalo Sandboxie Windows 11/10

• Maqaalka Amniga Internetka iyo talooyinka isticmaalayaasha Windows

• Dami Su'aalaha Amniga gudaha Windows 11/10 adoo isticmaalaya qoraalka PowerShell