cpu usage increases significantly (doubles to triples) if you enable whole disk encryption (bitlocker) and enable memory integrity (device security core isolation)

[xenek]

CPU used to sit at approximately 30%, software decoding & software re-encoding of a base H.264 stream (clear) from a single cam.

I did two things.

1. Turned on bitlocker
2. Enabled memory protection

Now CPU is at perhaps 90 to 95%, often sticking at 100% for periods.

I think I could overcome this if the software

1. had option to write untouched h.264 stream to disk
2. turn off software or hardware decode & display (no HUD)

This would disable the very awesome feature of the daily summary, however, sometimes I am at home or am comfortable having the most basic stream of video data. I can achieve that using VLC stream to disk, however I actually think being able to toggle to a 'low cpu' mode, perhaps for specific cameras that have integrated hardware encoding, or for times when you are using the system that is running the software for other purposes, might be worth considering.

[xenek]

Hmm perhaps I should have read what I had open on a different tab before posting...

https://www.reddit.com/r/ispyconnect/comments/mj6eba/system_performance/

Oh - that's a different program. Hmm, I actually prefer contacam. Maybe I have to turn off memory protection & disk encryption to recover performance? I wonder if there's a different NVME feature set on other disks that shifts encryption load to a dedicated silicon on the disk, assuming that the CPU is handling the disk encryption on this particular PC? Perhaps I need to juggle NVME disks, or study NVME feature & CPU & GPU feature sets to see if there is way to remove disk encryption load off the CPU, given that it's a workstation?

[xenek]

Here's some additional information on performance issues, potentially helpful?

https://www.overclock.net/threads/core-isolation-memory-integrity-has-a-major-effect-on-performance.1798410/

Edit:

And some information on the memory protection feature from Microsoft

https://learn.microsoft.com/en-us/windows-hardware/drivers/bringup/device-guard-and-credential-guard

https://support.microsoft.com/en-au/windows/device-protection-in-windows-security-afa11526-de57-b1c5-599f-3a4c6a61c5e2

And on bitlocker

https://www.tomshardware.com/news/windows-software-bitlocker-slows-performance

-it looks like I can potentially switch to hardware encryption.

https://eu.crucial.com/support/articles-faq-ssd/setup-ssd-encryption-via-bitlocker

(this above link is amazing, It shows how much has to be perfectly configured to get hardware encryption working)

https://techcommunity.microsoft.com/t5/windows-security/how-do-you-enable-hardware-bitlocker/m-p/3031860

(this shows even when trying and configuring many things correctly, it seems difficult to get hardware encryption working)

Here's an alternative instruction set.

https://blog.odenthal.cc/how-to-enable-bitlocker-hw-encryption-with-modern-ssds-e-g-samsung-980-pro/

And some enterprise software that helps identify encryption type & manage it?

https://forums.lenovo.com/t5/ThinkPad-X-Series-Laptops/Disabling-BitLocker-with-OPAL-drive-advisable/m-p/3937894?page=1#3937916

And a PDF of a different vendor's way to enable hardware encryption.

https://media.kingston.com/kingston/articles/enabling-and-disabling-edrive-to-utilize-hardware-encryption-us.pdf

I did a check by using HWinfo to identify the disk model, then doing a google for the word 'opal 2' with that model number. I found my NVMe doesn't support hardware encryption. So I will disable it.

edit: expansion, clarity