| Event Id | 3112 |
| Source | Microsoft-Windows-Hyper-V-Worker |
| Description | "The virtual machine could not be started because the hypervisor is not running. The following actions may help you resolve the problem:%r 1) Verify that the processor of the physical computer has a supported version of hardware-assisted virtualization.%r 2) Verify that hardware-assisted virtualization and hardware-assisted data execution protection are enabled in the BIOS of the physical computer. (If you edit the BIOS to enable either setting, you must turn off the power to the physical computer and then turn it back on. Restarting the physical computer is not sufficient.)%r 3) If you have made changes to the Boot Configuration Data store, review these changes to ensure that the hypervisor is configured to launch automatically.%r " |
| Event Information | According to Microsoft : Cause This event is logged when the virtual machine could not be started because the hypervisor is not running. Resolution Check Hyper-V status The virtual machine could not be started because the hypervisor is not running. Check your BIOS settings and BCD store, then restart the physical computer. Hyper-V requires hardware support, including: an x64 CPU; VT (Intel) or AMD-V (AMD) hardware extensions; No eXecute (NX)/eXecute Disable (XD) and full BIOS support for hardware virtualization. Check your physical computer's BIOS settings to ensure that virtualization features are enabled, and then turn off the power to your physical computer. Restart the physical machine. You can use the Virtualization Detect (DetectVp.EXE) tool to check if the physical computer meets the requirements for Microsoft virtualization software. This test checks virtualization support for both Intel and AMD processors. The tool is part of the Windows Driver Kit (WDK). To download the WDK .iso file: 1.Go to the Microsoft Connect Web site and sign in with your Live ID. 2. Enter the Microsoft Connect Web site. Click Connection Directory. 3. Click Developer Tools, and then click "Windows Driver Kit (WDK), Windows Logo Kit (WLK) and Windows Driver Framework (WDF)." 4. Click the Download link to download 6.1.6001.18002.081017-1400_wdksp-WDK18002SP_EN_DVD.iso Check that Boot Configuration Data (BCD) store is set to start the hypervisor, and then restart your physical computer. The BCD store contains boot configuration parameters and controls how the operating system is started in Windows Vista and Windows Server 2008 operating systems. These parameters were previously in the Boot.ini file (in BIOS-based operating systems) or in the nonvolatile RAM (NVRAM) entries (in Extensible Firmware Interface-based operating systems). You can use the Bcdedit.exe command-line tool to update BCD store with the correct launch options as referenced in the error, and then restart the server. Bcdedit.exe is located in the \Windows\System32 directory by default. On PC/AT BIOS systems, the BCD store resides in the active partition's \boot folder. On EFI systems, the file is located on the EFI system partition (ESP) under \EFI\Microsoft\Boot. Verify The Hypervisor is not stopped. |
| Reference Links | Event ID 3112 from Source Microsoft-Windows-Hyper-V-Worker |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.