Incompatible Driver(s): tib.sys?

Dear Jules van Rosebrook, James Lewis, 

thank you for sharing your feedback! Unfortunately, in the current software version it's not possible to overcome this limitation. I've registered your feedback.

Dear Jules van Rosebrook, James Lewis,

thank you for sharing your feedback! Unfortunately, in the current software version it's not possible to overcome this limitation. We have registered your feedback.

Bit of a shame that the software doesn't work with full compatibility with Windows 11

Some good news for any users willing to go the Acronis subscription route!

The latest version of ACPHO announced earlier today now has a further Custom installation option to not install Try & Decide and if not selected also does not install the tib.sys driver!

I did a search for tib.sys after doing the above custom install and it is not found, so Memory Integrity can be enabled without getting any warning about this Acronis driver.

Whats the Problem?

Why can't we just have an instruction, how to uninstall tib.sys for those who want to activate MS Memory integrity in Windows 11?

The only drawback after this would be not to able to explore inside an image any more, or not?

Today I got the same problem with Acronis driver "tib.sys" in my True-Image-2021 installation.

Maybe the reason for getting it so late is the update KB5016691 which I installed yesterday.

I want to use all available security features from Windows 11 PRO as possible. And I do not use Acronis "Try & Decide", so I tried to rename the driver to "tib.~sys" as previous suggested. 

But after rebooting I am still not able to switch on "kernel-isolation".

No conflicting incompatible driver is displayed :-)

Seca Hattin wrote:

Whats the Problem?

Why can't we just have an instruction, how to uninstall tib.sys for those who want to activate MS Memory integrity in Windows 11?

The only drawback after this would be not to able to explore inside an image any more, or not?

See my post here in this topic where I have given instructions on how to rename tib.sys to tib.~sys to be able to enable Core Isolation / Memory Integrity if not using ACPHO latest build version.

Jürgen Womser-Schütz wrote:

Today I got the same problem with Acronis driver "tib.sys" in my True-Image-2021 installation.

Maybe the reason for getting it so late is the update KB5016691 which I installed yesterday.

I want to use all available security features from Windows 11 PRO as possible. And I do not use Acronis "Try & Decide", so I tried to rename the driver to "tib.~sys" as previous suggested. 

But after rebooting I am still not able to switch on "kernel-isolation".

No conflicting incompatible driver is displayed :-)

 Jürgen, have you checked that the rename of tib.~sys has taken after the reboot?  I have been able to use this method myself without issues.  I would expect that there would be some driver information displayed when trying to enable core isolation if it still hits a problem, see my previous post above and follow the link back to my original post about renaming tib.sys then read forward through some of the following posts after that too.

@ Steve Smith

Hello Steve, no after reboot the filename was still "tib.~sys".

To be shure to made no mistake, I renamed it back to "tib.sys" and after reboot and enabling core-isolation my list of incompatible drivers contains only "tib.sys".

After re-rename to "tib.sys.renamed", booting and trying to enable core-isolation it says that there are incompatible drivers - but the provided driver list is empty  :-)

By the way, after using Acronis True Image for 15 years or so, I am more and more frustated about the quality of this software. Acronis adds more and more features which I don't need and don't use, like Try&Decide, Active Protection, ... and the software stability is decreasing.

Seeing now the support desaster documented in this thread, I am now looking for an alternative software.

Any hints?

yes this did help me thanks, I could not delete my post it was invisible, so i guess now its too late ;-)

Hello Team,

Core Isolation + ACHO = I see that Acronis isn't compatible with Windows 11 when this feature is ON.

No good. Need update. See you soon :-)

Todd Carter wrote:

Steve Smith wrote:

Some good news for any users willing to go the Acronis subscription route!

The latest version of ACPHO announced earlier today now has a further Custom installation option to not install Try & Decide and if not selected also does not install the tib.sys driver!

I did a search for tib.sys after doing the above custom install and it is not found, so Memory Integrity can be enabled without getting any warning about this Acronis driver.

 

Very nice, thank you.

 

 

So, sad to hear that Acronis has abandoned its longtime supporters.  I have been an Acronis customer from its earliest days and I upgraded all the time (waiting for discounted prices). Now the discounts are gone and it would cost $100/yr to back up the computers in our home, much more than a small family can afford.  While Acronis is still the most reliable backup software, we will have to try something else not. Apparently, they are going corporate.  Au Revoir, Acronis!

Same issue here. I am not willing to go for a subscription model.

Have bought at least 5 version of Acronis in the past decades and believe that there ios simply no interest in fixing it. I will uninstall acronis and use other software if there is no solution within this month. A pitty how companies are dealing  with known security issues...

Copperlanding wrote:

Same issue here. I am not willing to go for a subscription model.

Have bought at least 5 version of Acronis in the past decades and believe that there is simply no interest in fixing it.

I have just simply renamed "tib.sys" (as admin) in "xtib.sys"

Acronis seems to work and I could enable the Windows core isolation.

Not sure if that helps everyone and Acronis works properly in future.

 

A pitty how companies are dealing  with known security issues...

Carl and Frank, take a read of forum topic: Reflecting on a Post-ATI World where other users have discussed alternative solutions.  If you have existing perpetual licenses for ATI 2015 through 2021, then these will continue to work with up to Windows 11.

Same, 100% agreed

Tomáš Mark wrote:

Todd Carter wrote:

I have been an Acronis customer since 2018. I just purchased ACPHO and immediately ran into this issue. I will be requesting a refund due to this issue. You cannot say this is supported on Windows 11 when you either need to turn off security features or hack the installation to get around the security features. IMO this is not a supported OS if you need to ask your customers to take these steps to install your product. 

 

I can only agree.

I can also confirm that the workaround of renaming tib.sys fixes the issue and permits core integrity security.  Still, the unavailability of a consumer-friendly version of Acronis will inevitably create more problems in the future.  Thanks for all the helpful comments and suggestions in Steve Smith's post above.  I had forgotten about some of the alternatives, now I will have to test some of them.

Same issue TIB.sys not allowing Windows 11 to Windows Security Core Isolation Memory Integrity feature.

Acronis has to address this issue - please let us know that you are working to resolve the situation.

-Robert

I have Acronis 2018 in Windows 11 Professional and have just found the tib.sys incompatibility issue... I am a bit slow with all the problems but i tried to follow the Legends, Steve Smiths, advice but Windows always says it is running and won't allow the change to tib.~sys,

I disabled all I could through Task manager and msconfig but it always seems to run.  Help please

I'm using  ACPHO and also very recently noticed the tib.sys incompatibility issue in Windows 11 Pro. I'm not sure why it surfaced only recently as I have been using ACPHO for a long time. Possibly, the issue was always there but Windows only showed the warning about it since a recent update???, not sure.

Anyway, the solution to not install the "Try & Decide tool" works! In my case, I actually already upgraded to the latest version recently but I simply removed the "Try & Decide tool" just now:

1. It can be done in Windows in "Add or remove programs", click the 3 dots for the ACPHO listing there and select Modify. 
2. Then just uncheck the "Try & Decide tool" and proceed with clicking Modify.
3. After that, I was able to enable "Memory integrity" in Windows
4. Then a reboot and it was all good after that.

I totally agree with all the comments here saying that it shouldn't be necessary to modify the installation in order to be able to use a security feature like this, it really ought to work out of the box without removing functionality.

Having said that, if you are not using the "Try & Decide tool" I think the solution is ok.

I also strongly believe this solution is better than renaming the tib.sys file! You never know what issues might arise in the future because of that.

Graham Holman wrote:

I have Acronis 2018 in Windows 11 Professional and have just found the tib.sys incompatibility issue... I am a bit slow with all the problems but i tried to follow the Legends, Steve Smiths, advice but Windows always says it is running and won't allow the change to tib.~sys,

 

I disabled all I could through Task manager and msconfig but it always seems to run.  Help please

You can boot Windows into safe mode to don't load this file, then you will be able to rename it.  

Graham, as Fistor has suggested, starting Windows in Safe mode is the best way to be able to rename the tib.sys file unless you have an active subscription for ACPHO which now offers a Custom Install option where 'Try&Decide' can be opted out of being installed.

Roger Haydon wrote:

Acronis can run in W11 but with Memory integrity off. Acronis have had a lot of lead time to address this. I've removed Acronis and will do without it, I have other backup, ransom ware and restore solutions in place. 

Roger, which solution do you now use? I am in the same situation now myself and need a remedy.

At the end I uninstalled Try@Decide and all is OK.

Robert Rossi wrote:

Same issue TIB.sys not allowing Windows 11 to Windows Security Core Isolation Memory Integrity feature.

Acronis has to address this issue - please let us know that you are working to resolve the situation.

-Robert

I cannot speak for Acronis, but my understanding is that there are insurmountable problems in dealing with the issue. The simple solution adopted in ACPHO is to do a custom installation without Try & Decide. A permanent solution will presumably be implemented with the code rebuild that has been underway for a considerable time now.

All versions of ATI (including 2021 and 2020) are out of support, so I doubt that anything will be done to address the issue as neither officially supports Windows 11. However, the issue is also present in Windows 10, so it was an issue when ATI 2021 and ATI 2020 were released.

Ian 

Bill Nolan wrote:

Roger Haydon wrote:

Acronis can run in W11 but with Memory integrity off. Acronis have had a lot of lead time to address this. I've removed Acronis and will do without it, I have other backup, ransom ware and restore solutions in place. 

Roger, which solution do you now use? I am in the same situation now myself and need a remedy.

 

Hello Bill.  I use iDrive for backup across devices, Onedrive for real time file syncing and Bitdefender for ransomware and general Internet security. It all works just fine. 

Hello Bill.  I use iDrive for backup across devices, Onedrive for real time file syncing and Bitdefender for ransomware and general Internet security. It all works just fine. 

Thank you or all the help and advice.  I still did have trouble because the tib.sys kept opening even in Safe Mode without networking and I wasn't allowed to change the file to tib.~sys.  So I used Task Manager to disable all the Acronis Startups and then restarted in safe mode and it allowed me to change it.  I then had to restart and try to change the memory protection which seemed to work but after the restart I needed to confirm that change and restart again  and then go into Task Manager and Enable the Acronis start ups and restart and it ALL WORKED.

Also I had to go into my Microsoft Account to get the Bit Locker recovery Key to do the Safe Mode work.

Thank you all so very much. I couldn't have done it without you all

Goodbye Acronis

With no signs of Acronis caring about Us, ignoring their customers request of fixing the TIB:SYS problem, in regard to enable Core Integrety on Windows 10/11.

And also the decision to REMOVE the option to buy permanent licences, I.E. 'Gone the way of TRAPPING their customers into an ETERNAL payment plan' licensed products only, I have been forced to take the (difficult) step / dession to STOP buying any further Acronis products.

Sorry, Acronis, has been a long run with Acronis since I paid for My first Aconis product:

True Image 2013 / Acronis Disk Director 11 Home

I have over the years paid You for the LIFETIME products below:

(?) True Image 2013 (That Ýou for some reason have removed from My account?)

1 Acronis Disk Director 11 Home

15 True Image 2014

15 True Image 2015

1 Acronis Disk Director 12

5 Acronis True Image 2016

5 Acronis True Image 2017

5 Acronis True Image 2020

5 Acronis True Image 2021

Your GREED have forced Me to leave..

So Acroneis True Image 2021 WILL be the LAST product I ever buy from You..

ACRONIS R.I.P. 

Hi, got same problem, a few incompatible drivers after running Win11 for several months, I guess warning came with updates recently.  Acronis tib.sys is one of the suspects,

My question, straightforward, I only used Acronis one off to cloning SATA to SSD, both installed on same PC. the old hd still there, so if I am not using Acronis anymore, it would be the cloned SSD if I uninstall the Acronis software altogether at once?

Thanks ,

Kris

Kris, I would create a backup of you system disk and create media before uninstalling ATI, as a precaution against future problems. You can use the recovery media to create new backups on a regular basis.

Ian

frustrating, I see your post and despite client from TIB since age, I will not renew my licence this time.

Unacceptable to sell software that hinder windows security.

After reading through this thread and reading Steve's solutions I went into apps & features scrolled down to Acronis Cyber protect and selected Modify. The same options showed up that Steve posted and I unchecked the Try and Decide tool. After reboot this was no longer an issue. Of course now the Gigabyte App Center gives me 4 unable to load messages. So that is next!

Steve Smith wrote:

Backup/core protection is just backup and restore and all this anti-virus crap is history? sorry for my bad english but i use a translator

Bernd, Backup and core protection is what Acronis used to be prior to the introduction of Active Protection and the later Cyber Protection features, i.e. it is Backup, Recovery, Clone and the tools needed for building rescue media, adding new disks etc.

Anti-ransomware protection is in essence Active Protection as introduced with ATI 2018.

Real-time protection = Cyber Protection with antivirus etc.

Try and Decide tool is the main culprit at the focus of this forum topic, i.e. it bring the tib.sys kernel driver which is incompatible with Windows Core Isolation.

Steve Smith wrote:

ok thanks for your answer. I got the test version and in principle nothing has changed. I deselected everything except the first one. The processes and services look almost the same and although the protection was deactivated, the PC was still scanned first. Ok that was due to the weak points evaluation. what a pity i thought if you deselect all that i would finally have a pure backup and recovery program again.

I'm using ATI2021 and I'll try the tib.sys from Try and Decide tool

Steve Smith wrote:

Another option here is to use a virtual machine for testing!  I use mainly Hyper-V to run my test systems with Win 10 and 11 where I don't need to use either T&D or Sandboxie etc, as I simply run a sync of my VM's to an external USB drive, and if I hit an issue, run a reverse sync to put any back to their last good state.  A further advantage is that VM's run on top of my main OS where I have Core Isolation enabled (after renaming tib.sys to tib.~sys) and can be recorded when needed.

Thank you it Worked Perfectly  

Changing the tib.~sys file and rebooting fixed it so i could Enable the Core Isolation option.

I have Windows 11 Home but I found a way via Google to enable Hyper V instead of using the Free Oracle VirtualBox software.

verified that Acronis supports the low-level piggybacking of trojan and keyloggers.  It is conflicting with a VITAL core system for security on win11 systems.  You should remove asap.

I had downloaded Seagate Diskwizard by Acronis, but have since uininstalled it because of this tib.sys problem

I am not impressed by Acronis or Seagate

I'd vote for this driver to be updated as well. Thanks!

I can attest that renaming tib.sys to tib.~sys in Windows 11 DOES allow core isolation to be turned back on in Windows Security. Of course, a reboot is required. Furthermore, so far, I can still use ATI functionality, including cloning, with no apparent problems. However, I do not understand why Acronis forces us to go through this hack to fix an incompatibility between ATI and Windows11.   

I have used Acronis products since 2009, and I am disappointed that they are so painfully slow to incorporate compatibility fixes  - Steve.

Hi there,

Are you sure that simply renaming the file tib.sys is enough and all the functions of the Acronis True Image remains unaltered and working?

Jordi Sales Rodríguez wrote:

Hi there,

Are you sure that simply renaming the file tib.sys is enough and all the functions of the Acronis True Image remains unaltered and working?

All functions except Try and Decide which uses tib.sys

I had no idea what this was until Windows 11 started giving me security vulnerability notifications, which led me to this thread.  I have since installed a Synology NAS system and will be using a combination of SHR-2, Snapshots and Hyper Backup to local and cloud) to protect my data.  No monthly fees or driver incompatibility issues to worry about.  Looking at the history of this, it is something that Acronis likely could (and from a consumer perspective, most definitely should) have fixed and patches should be provided to prior versions.  Instead, they chose to either not deal with it or push customers on to their newer subscription based service.  I will be uninstalling Acronis from all of my systems.  

We're out. We bought and used every version of True Image since 2007, and have watched Acronis gradually lose the plot. They've turned it into a ponderous, bloated, money-sucking blob. Now it fails this simple Windows security test, and they haven't fixed it.

Like others, we've switched to Synology Active Backup, which is included with Synology NAS's, with no annual fee. Central management from the NAS of all our device backups is sweet. We already had two of them so it was a no-brainer.

Guys, we agreed Acronis should have adapt their software to be compatible with Windows 10 or 11. But you can't says with a NAS, synology or other brand, that you don't have montly fees. In fact you have paid and amortize your NAS a certain amount + hard disks drives + electricity + some admin maintenance by your own. Acronis will also have to pay for that so to their customers. They monthly amount is by however discutable...

My gripe with Acronis is that they have abandoned their loyal customers.  Like many commenting above, I bought every Acronis product from the beginning. But the new subscription pricing effectively more than doubles the cost (because I always bought at a sale price).  And for what?  Yes, removing tib.sys worked and keeps the software running on Windows 11.  However, eventually, I will be moving on to something less pricey.  It's not that I'm unwilling to pay for Acronis, I always did in the past, it's just that with several computers in the house this is more than I am willing to pay.