TPM issues in the Guest OS after migrating the VM to ESXi 8.0 U3

Products

• VMware vSphere ESXi

Issue/Introduction

Moving a vTPM enabled VM (e.g. Windows 11) to a host running 8.0 U3 may cause the following behavior:

• Applications within the Guest OS stop authenticating with TPM
• When running PowerCLI command Get-TpmSupportedFeature, nothing is returned.

Environment

VMware vSphere ESXi 8.0.3

Cause

This is due to a new backend feature enablement for vTPM. Due to this new feature, additional flags were added for vTPM in 8.0 U3 that were not present in previous versions. When the VM migrates from an older version to 8.0 U3, these new values result in a null hierarchy disable, causing vTPM to have issues.

Resolution

This issue is resolved in VMware ESXi 8.0 U3e release. Log in to the Broadcom Support Portal to download this patch.

Additional Information

Get-TpmSupportedFeature

What Is a Virtual Trusted Platform Module