Secure System

Windows ProcessMicrosoft Corporation

Also called secure system, secure kernel, vbs secure system

WindowsSystem Component

The Task Manager name for the secure kernel side of virtualization-based security. It is not a program you installed and it is not System Idle Process.

What you need to know

Secure System is the VBS kernel row. PID 4 System is the normal kernel.

When Virtualization-based security is on, Task Manager can show Secure System. That is the secure kernel / VSM world. It is not Secure System.exe from the web.

Safe?: Yes. It is VBS
Can I end it?: No
Same as System?: No. System is the normal kernel

Feex says

If I see Secure System next to System, I treat that as VBS being on, not as a second OS to uninstall. Ending it is not offered for a reason.

What is Secure System?

Secure System is how Task Manager labels the secure kernel used by VBS. Isolated trustlets such as LsaIso.exe live in that world. The normal kernel still shows as System, usually PID 4.

What does it do?

It enforces hypervisor isolation for secrets and some integrity features. It does not host Chrome tabs and it does not scan files.

Why is it running?

The firmware and Windows enabled VBS, Memory Integrity, or Credential Guard. A PC without those features often will not show this row.

Is it safe?

Usually safe

The row is part of Windows virtualization-based security. A download named SecureSystem.exe is not this process.

A legitimate copy normally runs from:

Secure kernel (no user-mode image in Explorer)

Shown when VBS is active
Not System Idle Process
Not PID 4 System

Can I end it?

Windows will not let you end Secure System from Task Manager. Turning off Memory Integrity is a firmware and Settings change, not an End task.

Can I remove it?

You cannot uninstall Secure System. Core isolation settings live under Windows Security.

Should it start with Windows?

The hypervisor and secure kernel start before the desktop. This is not Startup Apps.

Normal resource behavior

These are contextual labels, not universal averages.

CPU: Usually low. Integrity features add a small cost Microsoft documents
Memory: Reserved for the secure world
Disk: None
Network: None

File information

Secure System file information
Executable name	Secure System
Common legitimate path	Secure kernel (no user-mode image in Explorer)
Publisher	Microsoft Corporation
Signature expectation	Signed by Microsoft Windows

Common problems

People confuse it with malware named Secure

Check that there is no Secure System.exe path. The real row has no folder in Explorer.

A game asks to turn off Memory Integrity

That is a Core isolation setting. It is not the same as ending Secure System in Task Manager.

Troubleshooting

Diagnose before you change anything destructive.

msinfo32 > System Summary > Virtualization-based security

Running here explains the Task Manager row.

Do not download a "Secure System fixer"

There is no official installer.

Technical details

Secure System technical details
Display name	Secure System
Role	VBS secure kernel

Sources and verification

Reviewed by Feex editorial. Last verified August 2026 Status: Feex Reviewed. How we research.

Microsoft Learn: virtualization-based security · VBS and the secure kernel
Microsoft Learn: Credential Guard · VSM isolation
Foxhole process map · First-party samples on Windows PCs. Not a lab benchmark.

Was this article useful?

A yes or no is enough. Pick a reason if you want, or add a short note.