Why is Hardware Assisted Virtualization disabled by default

hardware-virtualizationvirtualization

Why would vendors by default set hardware assisted virtualization off? I have a Lenovo Thinkpad X201 (64bit) but it seems this is the case with other vendors too. I want to run some virtual machines so I'm enabling it but I'm wondering if there are negative repercussions to this that I need to watch out for in the future.

Best Answer

I believe it is for security reasons. A rogue hypervisor can install itself and then run the main OS, the main OS can't tell that it's running under a hypervisor (sometimes considered ring -1). It could potentially be the ultimate virus. So you have to enable explicitly if you know you want to run a hypervisor.

Related Question