Ok, i checked and 3.12 and 4.4 also call it "ept". Hans, can you adjust that in the TID? as for disabling EPT ... the problem is the Meltdown protection KPTI with its address space flipping will then cause a huge performance loss. And likely if L1TF affectedness is there, the cpu is also affected by Meltdown.