---
title: RequirePlatformSecurityFeatures enum | Wartiva GraphQL API
description: GPO policy: "Turn On Virtualization Based Security" — "Select Platform Security Level" sub-option, under Computer Configuration > System > Device Guard.
url: https://wartiva.com/api-docs/types/require-platform-security-features.html
updated: 2026-10-07
---

Endpoint configuration · GraphQL enum

# `RequirePlatformSecurityFeatures` enum

GPO policy: "Turn On Virtualization Based Security" — "Select Platform Security Level" sub-option, under Computer Configuration > System > Device Guard. Controls which platform security features are required to run Virtualization Based Security (VBS). Registry: HKLM\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard:RequirePlatformSecurityFeatures (REG_DWORD). Reference: [Policy CSP - VirtualizationBasedTechnology](https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-virtualizationbasedtechnology)

## Values

| Enum Value | Description |
|---|---|
| `SECURE_BOOT` | Secure Boot only (registry value 1, default). VBS requires Secure Boot as the platform security baseline. Hardware DMA protection is not mandated. |
| `SECURE_BOOT_AND_DMA_PROTECTION` | Secure Boot and DMA protection (registry value 3). VBS requires both Secure Boot and hardware-based DMA protection (IOMMU). DMA protection requires hardware support. More secure than Secure Boot alone. |

## Used by

- [`ComputerAdministrativeTemplates`](https://wartiva.com/api-docs/types/computer-administrative-templates.html) type: Computer-specific Administrative Templates (ADMX) settings on an Endpoint.

## Example

### Example

```json
"SECURE_BOOT"

```

---

Wartiva is in early access. Request access: https://wartiva.com/early-access.html  
All pages: https://wartiva.com/llms.txt