Frimware and SmmIsolationLevel

[Sammy44449]

I ran into a problem with the security

Firmeware Securtiy

BIOS (F.23)

This is a brand new high end laptop!?
The root cause of level 0 almost always lies with the manufacturer (OEM) or a misconfiguration in the BIOS?
PS C:\WINDOWS\system32> $dg = Get-CimInstance -Namespace 'root\Microsoft\Windows\DeviceGuard' -ClassName Win32_DeviceGuard
>> $dg | Format-List *

AvailableSecurityProperties : {1, 2, 3, 4...}
CodeIntegrityPolicyEnforcementStatus : 2
InstanceIdentifier :
RequiredSecurityProperties : {1}
SecurityFeaturesEnabled : {0}
SecurityServicesConfigured : {2, 5}
SecurityServicesRunning : {2, 5}
SmmIsolationLevel : 0
UsermodeCodeIntegrityPolicyEnforcementStatus : 1
Version : 1.0
VirtualizationBasedSecurityStatus : 2
VirtualMachineIsolation : False
VirtualMachineIsolationProperties : {0}
PSComputerName :
CimClass : root/Microsoft/Windows/DeviceGuard:Win32_DeviceGuard
CimInstanceProperties : {AvailableSecurityProperties, CodeIntegrityPolicyEnforcementStatus, Inst
anceIdentifier, RequiredSecurityProperties...}
CimSystemProperties : Microsoft.Management.Infrastructure.CimSystemProperties

[BeemerBiker]

You have the latest bios.  Your laptop seems to be new but you do not have cloud restore

please verify that your product ID is A4NN9AV#ABH

Did you purchase the laptop with Windows 11 or FreeDos?

Please read this discussion about TPM problems

I recommend this AI procedure

Please let me know what you find out.