07-17-2020 , 10:10 PM
Overview
RemoteFX vGPU makes it possible for multiple virtual machines to share a physical GPU. This feature was first introduced in Windows 7 and was removed as an option for users in Windows Server 2019. The current implementation of RemoteFX vGPU appears susceptible to security vulnerabilities (see the FAQ section for CVE details). Because these newly identified vulnerabilities are architectural in nature, and the feature is already removed from newer versions of Windows, the July 14, 2020 security updates and all superseding Windows Updates will disable and remove the RemoteFX vGPU feature. Starting with the July 14, 2020 security updates, this and all superseding Windows Updates will disable the RemoteFX vGPU feature.
Although users have the ability to re-enable RemoteFX vGPU until February 2021, we strongly encourage that users seek an alternative vGPU option.
Secure GPU virtualization is available through Discrete Device Assignment (DDA) in Windows Server LTSC releases (Windows Server 2016, Windows Server 2019) and Windows Server SAC releases (Windows Server, version 1803 and later versions).
For Windows 10, version 1803 and earlier versions
To configure the RemoteFX vGPU 3D by using Hyper-V Manager, follow these steps:
To configure the RemoteFX vGPU 3D adapter, you must use the following PowerShell cmdlets:
source
RemoteFX vGPU makes it possible for multiple virtual machines to share a physical GPU. This feature was first introduced in Windows 7 and was removed as an option for users in Windows Server 2019. The current implementation of RemoteFX vGPU appears susceptible to security vulnerabilities (see the FAQ section for CVE details). Because these newly identified vulnerabilities are architectural in nature, and the feature is already removed from newer versions of Windows, the July 14, 2020 security updates and all superseding Windows Updates will disable and remove the RemoteFX vGPU feature. Starting with the July 14, 2020 security updates, this and all superseding Windows Updates will disable the RemoteFX vGPU feature.
Although users have the ability to re-enable RemoteFX vGPU until February 2021, we strongly encourage that users seek an alternative vGPU option.
Timeline:
- Deprecation: RemoteFX vGPU was removed with the release of Windows 10, version 1809 and Windows Server 2019.
- Disablement: RemoteFX vGPU will be disabled in all applicable Windows platforms in the July 2020 Windows security updates (July 14, 2020).
- Removal: RemoteFX vGPU will be removed from all applicable Windows platforms in the February 2021 Windows security updates (February 9, 2021)
Alternatives
In order to mitigate potential security risks within RemoteFX vGPU, we strongly recommend that users consider using an alternative vGPU technology.Secure GPU virtualization is available through Discrete Device Assignment (DDA) in Windows Server LTSC releases (Windows Server 2016, Windows Server 2019) and Windows Server SAC releases (Windows Server, version 1803 and later versions).
How to re-enable RemoteFX vGPU
For Windows 10, version 1803 and earlier versions
- To configure RemoteFX vGPU, add the RemoteFX 3D graphics adapter to the virtual machine (VM). For more information, see Configure the RemoteFX vGPU 3D adapter.
- To configure the RemoteFX vGPU 3D adapter, use one of the following methods:
To configure the RemoteFX vGPU 3D by using Hyper-V Manager, follow these steps:
- Stop the VM if it's currently running.
- Open Hyper-V Manager and navigate to VM Settings, and then select Add Hardware.
- Select RemoteFX 3D Graphics Adapter, and then select Add.
To configure the RemoteFX vGPU 3D adapter, you must use the following PowerShell cmdlets:
source