TPM Attestation error: PCR replay failed

Products

• VMware vSphere ESXi

Issue/Introduction

 The host is showing a failed TPM attestation with the error message: "PCR replay failed" after a successful upgrade.

 

Environment

VMware vCenter Server 8.x.
VMware vCenter Server 7.x.

Resolution

The customer need to engage with the Hardware vendor, go into the BIOS settings and change the TPM PCR banks to ONLY enable SHA256 (disable the SHA1 bank if it's enabled).