Windows Trusted Execution Environment Class Extension (WindowsTrustedRT) Service Defaults in Windows 10

Windows Trusted Runtime Interface Driver by Microsoft Corporation.

Default Settings

Startup type: Boot
Display name:Windows Trusted Execution Environment Class Extension
Service name:WindowsTrustedRT
Service type:kernel
Error control:critical
Group:Core Security Extensions
Path:%SystemRoot%\system32\drivers\WindowsTrustedRT.sys
Registry key:HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WindowsTrustedRT

Default Behavior

Windows Trusted Execution Environment Class Extension is a kernel device driver. In Windows 10 it is starting by the operating system Boot Loader as a part of the driver stack for the boot volume. If Windows Trusted Execution Environment Class Extension fails to load or initialize, Windows 10 attempts to record the error details into Event Log and restart the PC, using the Last Known Good configuration. If the Last Known Good configuration cannot be applied or working improperly, Windows 10 startup process halts with a Stop error. If you disable or delete the WindowsTrustedRT service, Windows 10 won't start.

Restore Default Startup Configuration of Windows Trusted Execution Environment Class Extension

1. Run the Command Prompt as an administrator.

2. Copy the commands below, paste them into the command window and press ENTER:

sc config WindowsTrustedRT start= boot
sc start WindowsTrustedRT

3. Close the command window and restart the computer.

The WindowsTrustedRT service is using the WindowsTrustedRT.sys file that is located in the C:\Windows\system32\drivers directory. If the file is removed or corrupted, read this article to restore its original version from Windows 10 installation media.