Incompatible Driver(s): tib.sys?
Trying to activate a Windows Security, Core Isolation, Memory Integrity feature.
Would like to enable Memory Integrity, but when moving slider to the ON position, I get the following response.
Is there a way to resolve this issue? Thanks...
It looks like Core Isolation/Memory Integrity will be required for Windows 11. Did you report this issue to Acronis Technical Support to see if they have an updated driver, since Windows 11 will be available soon-ish?
Hello Everyone,
discussed the topic with my colleagues from the RnD - Memory Integrity feature is currently not compatible with Acronis Cyber Protect Home Office\Acronis True Image software due to the conflicting drivers used. At this point, adding support for the Memory Integrity feature is not possible, however we continue collecting the feedback on this feature.
So, does this mean that True Image will not be compatible with Windows 11? I believe that Windows 11 requires this feature to be turned on.
David Leary wrote:So, does this mean that True Image will not be compatible with Windows 11? I believe that Windows 11 requires this feature to be turned on.
David, sorry but that is not correct. Windows 11 does not require the Memory Integrity feature to be turned on, and I can attest to both that fact and that ATI 2019 and later versions are continuing to work with Windows 11 even though Acronis officially only support the use of ACPHO on Win 11.
thank you Ekaterina, for the confirmation. you mention feedback is being collected, whats the best way to provide the feedback (I have the problem with my Windows10 machine). thank you.
Reported this issue to Acronis. They say their developers are working on resolving it in a future release. Ah well.
Richard MartinezAcronis, Roger Haydon
registered your comments in the related internal dev ticket, thank you! Unfortunately, we cannot share the ETA
Acronis can run in W11 but with Memory integrity off. Acronis have had a lot of lead time to address this. I've removed Acronis and will do without it, I have other backup, ransom ware and restore solutions in place.
Is there any update on the dev teams progress? Would like an eta. Much thanks!
My expectation is that it will never be supported in any version of ATI or the current version of ACPHO. We can only hope that it will be supported in the new version of ACPHO - not sure when it will appear, but I recall that Ekaterina said in a post in the ATI 2021 Forum (now the ACPHO Forum) that beta testing would be in the the first half of 2022. They are abandoning the current code and starting over, so it would be difficult to give an ETA for the beta, or say if it would be included in the initial release of the new version.
Ian
I'm chiming in here as well. I installed ACPHO on my brand new frame.work PC, and tib.sys is preventing me from enabling the core isolation / memory integrity feature.
I see from this thread that this known issue has been dragging on for too long, it doesn't make sense to me that my backup software is preventing me from turning on this important security feature.
If you want to keep my business then you will find a way to fix this issue. The clock is ticking, people. Otherwise, I'll move my business elsewhere.
@Ekatarina https://forum.acronis.com/user/85273
Hello Myles,
I've passed your feedback to the product management, thank you! I'm sorry to know you've encountered this limitation, however for now we can only suggest waiting for the new product version. Please note, that Acronis protection and antivirus modules will fully protect your system even if the Memory integrity feature is disabled.
I have been having the same problem described above, namely: "it doesn't make sense to me that my backup software is preventing me from turning on this important security feature."
Am tired of waiting so long for Acronis to incorporate a solution and will be looking for another backup program...
I have previously assumed that Acronis sells good and error-free products. But obviously, Acronis has not been able to solve a problem with the driver tib.sys for several months. It's a pity, but an alternative to Acronis should be found.
Hi Ekaterina, I have the same issue and was looking to upgrade from TI 2021 to ACPHO but I'm currently reluctant to do so with this Core Isolation - Memory Integrity feature disabled on my PC due to incompatible tib.sys. Security of my data is very important to me and I was very surprised to find this when running the windows 11 readiness / upgrade process.
There is basically no information from Acronis I have found except for a few bits and pieces in this forum thread regarding any details of this issue. This raises a lot of concerns / questions regarding what it really going on and how much our security been reduced. May I suggest that Acronis explain (technical bulletin?) the full impact of this situation with Acronis installed and this Windows Core Isolation - Memory Integrity feature turned off.
I would like to know the details of all security vulnerabilities and enhancements with;
- 1.Acronis TI 2021 or ACPHO installed with the Windows Core Isolation - Memory Integrity feature turned off,
in comparison to;
- 2. Another PC without Acronis software and the Windows Core Isolation - Memory Integrity feature turned on.
I have been regularly buying / upgrading Acronis Software for the last 13 years, but I might need to look elsewhere for a better backup software product, at least until Acronis sorts out the incompatible tib.sys issue or I am convinced otherwise.
Hi Ekaterina, I have the same issue with TI 2021 and Windows 10/11. I would be interested in going to ACPHO but until tib.sys and the entire ACPHO product works with Core Isolation - Memory Integrity feature enabled. Honestly, TI 2021 is advertised to work with Windows 10, but it doesn't unless you degrade your security setting for Memory Integrity. As a long time customer of Acronis, I expect your company to acomodate your customers for operating systems that your products claim to support. Otherwise, your customers are just crossing their fingers, hoping some change/improvement doesn't come along and break your product with no support.
I find it ridiculous that Acronis advertises "True Cyber protection" and "All-in-one Cyber Protection" but does not allow for a critical security feature (like Core Isolation, Memory Integrity) enabled in the Windows 10/11 Operating System.
Your product is advertised to Enhance customer's security not degrade or limit it. Your product currently limits it.
Please start standing behind your products and supporting patches to your products when OS security improvements come along like this.
Any timeline on fixing this incompatibility between Acronis tib.sys and windows 11 memory integrity? I need to know or I will have to switch to another product.
Hello Everyone,
If you are using Windows 10: Try&Decide is not compatible with Memory Integrity security feature. If you want to use Try&Decide, disable Memory Integrity on the machine: follow the steps in collapsible field below:
1. Go to Start and search for “Windows Defender Security Center” or go to Settings > Update & Security > Windows Security > Open Windows Defender Security Center.
2. Click the Device Security icon in the Security Center, then click the Core Isolation Details link.
3. Core Isolation screen shows you whether Memory Integrity is enabled or not. To disable Memory Integrity, flip the switch to "Off".
You will be prompted to restart your computer and the change will only take effect after restart
I've added this topic as a vote for the change request TI-239584 Memory Integrity support\optional installation of TnD driver.
Thank you!
Hi Ekaterina,
For me using Windows 10, just to be clear;
- I have never used Try&Decide and don't intend to. I checked and confirm it was turned off.
- I cannot enable the Core Isolation - Memory Integrity feature due to the incompatible driver "tib.sys" (Acronis Driver)
- I found the only solution is to uninstall your software and then the problem is fixed.
I'm looking for new backup software as I am very disappointed that this issue hasn't been resolved in the last 6 months of it being raised and still no timeline to fix it.
I think others here are having this same issue in Windows 10 and Windows 11. Either find a workaround that we can get rid of, or stop tib.sys from blocking this windows security feature or make it compatible with Windows 10/11.
I don't think anyone in this forum thread wants to use Try&Decide from what I have read.
I'm in full agreement with Mark's statements. With no official response, I'm looking for alternatives at this point.
Folks, there is a fairly simple way of resolving this issue provided that Acronis Try 'N Decide is not being used, which is to rename the C:\Windows\System32\drivers\tib.sys file then do a Windows restart, i.e. I renamed the file to tib.~sys and was able to turn on Core Isolation.
Note: I also had to follow the steps shown in webpage: - because the scan showed that there was another incompatible driver installed with Windows 10 that needed to be removed.
Once the above actions were done, Core Isolation was activated by a further restart.
I have been an Acronis customer since 2018. I just purchased ACPHO and immediately ran into this issue. I will be requesting a refund due to this issue. You cannot say this is supported on Windows 11 when you either need to turn off security features or hack the installation to get around the security features. IMO this is not a supported OS if you need to ask your customers to take these steps to install your product.
Todd Carter wrote:I have been an Acronis customer since 2018. I just purchased ACPHO and immediately ran into this issue. I will be requesting a refund due to this issue. You cannot say this is supported on Windows 11 when you either need to turn off security features or hack the installation to get around the security features. IMO this is not a supported OS if you need to ask your customers to take these steps to install your product.
Hello Todd,
thank you for sharing your feedback! Unfortunately, in the current software version it's not possible to overcome this limitation. I've registered your feedback as a vote for the change request TI-239584 Memory Integrity support\optional installation of TnD driver.
I've given up on Acronis, actually months ago. I realised I don't need it at all. I've got on-line and offline file backup via iDrive and file syncing via Onedrive as part of Office 365. I've got protection against malware, ransomware and multiple other cyber threats via BitDefender and Malwarebytes with image backup and restore via the free version of AOEMI backerupper. If Acronis had fixed this issue, I might have stayed (and spent more than I needed to). But they didn't, and haven't shown any urgency so they've lost me for good.
Roger Haydon wrote:I've given up on Acronis, actually months ago. I realised I don't need it at all. I've got on-line and offline file backup via iDrive and file syncing via Onedrive as part of Office 365. I've got protection against malware, ransomware and multiple other cyber threats via BitDefender and Malwarebytes with image backup and restore via the free version of AOEMI backerupper. If Acronis had fixed this issue, I might have stayed (and spent more than I needed to). But they didn't, and haven't shown any urgency so they've lost me for good.
FWIW Roger, while I understand your frustration, I don't believe that you "don't need it at all" i.e. I have had occasions where my system get hosed-up beyond the ability to recover it via say System Restore. And you sure don't want to have to go back to your original factory setup, get all your programs and settings back to where you want them, and then recover your files from your iDrive and etc. Having an image backup IMO is important and I make one every day.
It seems Acronis should make a "downgrade" to 2020 available to you and any others stuck with the W11 limitation. At least, I believe Steve Smith when he says 2019 and 2020 do work.
TomF wrote:It seems Acronis should make a "downgrade" to 2020 available to you and any others stuck with the W11 limitation. At least, I believe Steve Smith when he says 2019 and 2020 do work.
Tom, just to clarify two points here:
First, I have tested both ATI 2019, 2021 and ACPHO with Windows 11, plus also have ATI 2015 running fine on the same.
Second, this topic is really focussed on enabling Windows Core Isolation for which the Acronis Tib Manager (tib.sys) conflicts and prevents core isolation being enabled! I have got core isolation working with ATI 2021 on my main laptop running Windows 10 as documented in my earlier post above on Sun, 03/27/2022 - 16:27 by renaming tib.sys to tib.~sys and rebooting. The same approach should work with Windows 11 but I have not tried testing this yet.
Note: ATI 2021 on Windows 11 introduces problems with the Acronis Sync feature that don't happen with ACPHO...!
Steve Smith wrote:Folks, there is a fairly simple way of resolving this issue provided that Acronis Try 'N Decide is not being used, which is to rename the C:\Windows\System32\drivers\tib.sys file then do a Windows restart, i.e. I renamed the file to tib.~sys and was able to turn on Core Isolation.
Note: I also had to follow the steps shown in webpage: SOLVED: Core Isolation Memory Integrity Incompatible Drivers WDCSAM64_PREWIN8.SYS <link removed> - because the scan showed that there was another incompatible driver installed with Windows 10 that needed to be removed.
Once the above actions were done, Core Isolation was activated by a further restart.
Hi Steve,
I had thought of doing this but as I am unsure exactly what would fail after doing so, I decided not to.
Could you elaborate on what tib.sys is and what will fail after renaming it?
Wayne, tib.sys is shown as Acronis Backup Archive Explorer and is used by Acronis Try and Decide as far as is understood. It isn't documented anywhere in the Acronis KB documents.
Renaming it as tib.~sys on my own system has shown no negative effects or impact. I can still open both .tib and .tibx archive files in Explorer and via the main Acronis GUI.
My backups are all still running normally on schedule so currently I again don't see any impact from making the change and Core Isolation has been enabled since it was done!
It really shouldn't be necessary to fiddle with stuff like this. Acronis should have sorted this by now, they've had loads of time to it. Feels like the just don't care
Roger Haydon wrote:It really shouldn't be necessary to fiddle with stuff like this. Acronis should have sorted this by now, they've had loads of time to it. Feels like the just don't care
Agreed, this or any circumvention shouldn't be needed, especially to be able to use an integrated Windows security feature that has been present for since April 2018, which should have been plenty of time for Acronis to fix the issues caused by their Try 'N Decide use of tib.sys!
As mentioned by others, the fact that this core, Windows Security function has been ignored, and that there's now been plenty of time to remedy the issue, is unacceptable. This, along with the fact that a previous Acronis image restore failed and required a reinstallation of Windows, is pushing me to find another back solution.
I tried to complete the workaround by renaming the tib.sys file accordingly, however I was unable to do. Attempting to rename prompts that the file is in use, and doing so in Safe Mode didn't help.
What am I missing here?
Edit: I was able to stop the, "Acronis TIB Mounter Monitor" process via the Task Manager and then rename the file, however I swear I did this previously to no avail. Regardless, I was able to enable WIndows' Memory Integrity as other have done so with this unnecessary workaround.
Not much help at the moment, but Ekaterina posted in another thread recently that the problem will be addressed in the next version (not build); apparently this will be achieved by being able to exclude Try & Decide when installing ACPHO. Cannot find the post at the moment.
Ian
Uninstalled Acronis last night, went to IDrive.com instead.
IanL-S wrote:Not much help at the moment, but Ekaterina posted in another thread recently that the problem will be addressed in the next version (not build); apparently this will be achieved by being able to exclude Try & Decide when installing ACPHO. Cannot find the post at the moment.
Ian
Thanks for responding, Ian. That may be the case, however we're already using a relatively new version that should have included this implementation. Who knows how long this build will last.
It's April 2022. This was reported YEARS ago, ever since Core Isolation was first implemented and still ignored by Acronis.
Why would Acronis knowingly install software that blocks core Windows security functionality... in a age where everyone, everyone will get hacked. It's irresponsible!
Recommendation: least stop installing tib.sys, which apparently no one needs and Acronis doesn't acknowledge exists.
The majority of users will install the backup software and not realize their Windows 10/11 machine is now vulnerable.
Erol,
Apparently tib.sys is used by Try & Decide. The approach currently taken by Acronis is that you can only do a full installation, you cannot choose which components are to be installed. You also cannot subsequently selectively uninstall components, and it is difficult to components that you do not want to use. Allowing selective uninstallation of components or facilitating deactivation of some features can present opportunities for malefactors to do nasty things. I suspect the "obvious" solution of allowing selective installation of components is a major task, one that Acronis is unwilling to undertake at the same time as they are rebuilding ACPHO (apparently from the ground up). There is little known at this stage what this new ACPHO will look like, but Ekaterina has indicated that installation of Try & Decide will be optional.
It is my understanding that Microsoft does not have core isolation and memory integrity as a default settings which most users would be unaware of. However, equally I am sure that many/most of those who are are of the features would wish use them.
If it were up to me, I would have removed try and decide to enable core isolation and memory integrity, as I do not find Try & Decide to be of any benefit. Apparently a significant number of users find Try & Decide useful.
Ian
IanL-S wrote:Erol,
Apparently tib.sys is used by Try & Decide... I do not find Try & Decide to be of any benefit. Apparently a significant number of users find Try & Decide useful.
Ian
FWIW IanL-S, I have been using ATI almost since the company's inception, and dunno when they started including Try & Decide but have never used it myself, or at least iirc I "tried Try & Decide" years ago and found it confusing to use. Instead I rely on the obvious included tools when I install software and decide to uninstall again: either Windows' Uninstall, or Windows' System Restore, or if those fail to work of course there is ATI Recover from backups which I do every morning.
I don't see the value in T&D.
TomF Wrote:
I don't see the value in T&D.
It's a sandbox. Lets say you go to an unscrupulous web site or install a questionable program. You activate T&D and proceed. If everything is OK, you apply the changes. If there is a virus or you want to remove your history, you reboot to bring your system back to before you tried those questionable activities. This is MUCH faster than a full backup recovery.
I have used it a lot. There are plenty of other versions available. One of the free ones I've tried is Sandboxie. It will keep your web activity in a bubble, so that any activity the web activity creates is in a virtual sandbox. Same idea, but T&D protects the whole drive, which I much prefer.
TY for that @pl1. It has been years since I've used a sandbox. It has also been years since I tried T&D, so maybe I need to try it again--I don't recall it was "advertised" by Acronis as such (but I could be wrong about that too).
Another option here is to use a virtual machine for testing! I use mainly Hyper-V to run my test systems with Win 10 and 11 where I don't need to use either T&D or Sandboxie etc, as I simply run a sync of my VM's to an external USB drive, and if I hit an issue, run a reverse sync to put any back to their last good state. A further advantage is that VM's run on top of my main OS where I have Core Isolation enabled (after renaming tib.sys to tib.~sys) and can be recorded when needed.
pl1 wrote:TomF Wrote:
I don't see the value in T&D.
It's a sandbox. Lets say you go to an unscrupulous web site or install a questionable program. You activate T&D and proceed. If everything is OK, you apply the changes. If there is a virus or you want to remove your history, you reboot to bring your system back to before you tried those questionable activities. This is MUCH faster than a full backup recovery.
I have used it a lot. There are plenty of other versions available. One of the free ones I've tried is Sandboxie. It will keep your web activity in a bubble, so that any activity the web activity creates is in a virtual sandbox. Same idea, but T&D protects the whole drive, which I much prefer.
Well I tried it. Launched ATI and looked at the Help files, turned on T&D and just surfed a couple of pages with my browser, interested in seeing if the History will not have them when I reboot. Then I rebooted, got the T&D "Keep going" or "Discard", hit Discard and on boot I got first an Unhandled exception error in .NET, my VPN would not launch properly thus no Internet, got another error and finally when things settled down I tried to Reboot again and the machine wouldn't--became unresponsive and so I have to power-down.
When it restarted, one of my critical programs is not working right. I may have to do a full Restore.
So much for Try & Decide! Crap!!!!!!!
TomF Wrote:
When it restarted, one of my critical programs is not working right. I may have to do a full Restore.
So much for Try & Decide! Crap!!!!!!!
Well, I am definitely sorry about that. I certainly did not want you to screw up your system!
I've been using it for most ATI editions successfully throughout the years. (There was one version that would not work, if I recall.) I've never had any failures and I've used it successfully with a VPN (PIA) and it has always rebooted properly for me.
Not your fault. I decided to try it and yes it went horribly wrong, but now after several hours of fiddling I have got my PC mostly back. I did have to do a Recovery from Backup and I managed to screw that up the first try, and wipe a 2TB USB storage drive that was attached.
The 2nd attempt was more successful and I am back on-the-air.
I can only guess that the T&D somehow didn't like my 4GB RAMDisk. And that upon reboot, the RAMdisk was gone, and that was the cause for all the program errors. Indeed had I noticed that the RAMDisk was gone after the first reboot I might have been able to fix that and avoid the Recovery (and the wiped 2TB drive) altogether.
Years ago I had a Comodo system installed and it too had a sandbox and I never quite got the hang of using it. Needless to say after today I am CURED of ever trying T&D again.
Ok, glad you are back! I've never tried using a RAMdisk. Shows how valuable a good backup is! It's covered my butt more than a few times.
I renamed tib.sys and rebooted. Core isolation now works. The functions that I use in Acronis True Image appear to work. For curiosity's sake, I attempted to use Try & Decide and received this pop-up warning: "Unable to turn on Try&Decide because a volume encrypted with BitLocker has been detected." It appears that using Try & Decide on my system is not possible anyway. If I develop any problems with my Acronis functions I will report back here. At this point everything appears to be working normally.
This problem is discovered since at least 2020 (https://forum.acronis.com/forum/acronis-true-image-2020-forum/acronis-t…) and Acronis R&D engineers still haven't found a fix?
Incredible...!
An easy solution would be to make the installation of Try & Decide optional; in the current ACPHO beta the installation can be configured to exclude some some modules, but Try & Decide is not one of them. Apparently Acronis sees Try & Decide as an important module. It may also be that it is inextricably intertwined with other important functionality.
Ian
Same problem here with tib.sys. Will try renaming. Have been using Acronis True Image 2020 on PC for two years and Windows 11 for almost one year. Strange that the Windows Defender warning only popped up now. I'd rather periodically purchase "perpetual" licenses rather than pay yet one more annual subscription fee, so the tib.sys problem may be the straw that breaks the camel's back for me and Acronis. I, too, have used True Image for many years up 'til now.
Same problem 'Incompatible Driver(s): tib.sys' I am amazed by the lack of support from Acronis, I expected better.