Unable to import OVF template, VM will not power on due to TPM

Products

• VMware vCenter Server

Issue/Introduction

When you need to import an OVF templated from a system where TPM is enabled and hardware differences will not let you run the VM in the new location, you may need to use vCenter Converter Standalone to re-create the VM in the new location.

Environment

vCenter 7.x
vCenter 8.x

Cause

When a VM is created using TPM for secure boot, moving to new hardware may not support the version of TPM previously used.

Resolution

• Start the 

  Converter Standalone

   application.
• Click 

  Convert machine

  in the application menu.
• On the 

  Source System

   page of the 

  Conversion

   wizard, select the 

  Powered on

   radio button.
• From the drop-down menu, select a menu item that corresponds to your source machine location.

  If you have connected a 

  Converter Standalone

   client to a remote 

  Converter Standalone

   server, the menu item 

  This local machine

   is not available and you can convert the local machine only as a remote machine.

   

   

  Source Location	Action
  Local	Click  This local machine .
  Remote	Click  Remote Windows machine  and provide the IP address or name of the machine and administrator credentials. The default  Converter Standalone  Agent port for remote Windows machines is 9089. If you previously modified the  Converter Standalone  Agent port service number, enter  IP_Address : Port , where  IP_Address  is the IP address of the remote Windows machine and  Port  is the Agent port service number. You can provide the user name in the  domain\user  credentials format. Alternatively, you can enter a user name without a domain name and  Converter Standalone  will attempt to log you in to the remote machine by using the  machine\user  format.

• Click 

  View source details

   to see the hardware and software information about the source machine.
• Click 

  Next

  .

  If you convert a remote machine and the 

  Converter Standalone

   agent is not already installed on the source machine, a dialog box prompts you to confirm the installation and select an uninstallation method for the 

  Converter Standalone

   agent.
• Select the uninstallation procedure for 

  Converter Standalone

   agent and click 

  Yes

  .

  Converter Standalone

   agent is installed on the source machine.

   
• Make sure that the Windows version installed on the powered on machine is supported. For a list of supported operating systems, see Supported Operating Systems.
• Make sure that the 

  Converter Standalone

   server machine has network access to the Windows source machine.
• Turn off firewall applications running on the source machine.
• Deactivate simple file sharing on the source Windows machine.
• Stop or deactivate anti-virus software running on the source machine.
• Turn off User Account Control (UAC) or use local administrator account on the source machine.
• If you are running Windows 8 or later on the source machine, turn off Remote UAC.
  • If you are logged in as a member of the local Administrators group, you must deactivate the 

    User Account Control: Use Admin Approval Mode for the built-in Administrator account

     policy in the 

    Security Options

     folder of the 

    Local Group Policy Editor

    . You must reboot for the changes to take effect.
    • If you are logged in as the Administrator, you must deactivate the
       User Account Control: Turn on Admin Approval Mode
       policy in the 
      Security Options
       folder of the 
      Local Group Policy Editor
      . You don't need to reboot for the changes to take effect.
• On the Destination System page, select 

  VMware Infrastructure virtual machine

   from the 

  Select destination type

   drop-down menu.

   
• Provide the IP address or host name and credentials for authentication with the 

  ESXi

   host or 

  vCenter Server

  .

   
• When you convert a remote machine that has no direct access to the destination 

  ESXi

   server, select the 

  Use proxy mode

   check box.

  Proxy mode passes the data traffic through the 

  Converter Standalone

   server machine.
• Click 

  Next

   to proceed to the Destination Virtual Machine page.
• On the Destination System page, select 

  VMware Infrastructure virtual machine

   from the 

  Select destination type

   drop-down menu.

   
• Provide the IP address or host name and credentials for authentication with the 

  ESXi

   host or 

  vCenter Server

  .

   
• When you convert a remote machine that has no direct access to the destination 

  ESXi

   server, select the 

  Use proxy mode

   check box.

  Proxy mode passes the data traffic through the 

  Converter Standalone

   server machine.
• Click

  Next

   to proceed to the Destination Virtual Machine page.

   

   

Additional Information

You can download vCenter Converter here:  vCenter Converter Download

Related documentation:  vCenter Converter Standalone Documentation