How to Create a vTPM-Enabled Virtual Machine on a Host Without a physical TPM

Products

• VMware vSphere ESXi

Issue/Introduction

• This KB article describes how to create a vTPM-enabled virtual machine on a host that does not have a physical TPM chip.
• A physical TPM chip is not required to use vTPM on VM. Refer Create a Virtual Machine with a Virtual Trusted Platform Module

Environment

VMware vSphere ESXi 7.x
VMware vSphere ESXi 8.x

Resolution

There are two options available, either can be used to implement the configuration.

Standard Key Provider
1. Set up the standard key provider. Refer Setting Up the Standard Key Provider
2. Create a virtual machine with a virtual trusted platform module. Refer Create a Virtual Machine with a Virtual Trusted Platform Module

Native Key Provider
1. Set up the vSphere native key provider. Refer Configuring and Managing vSphere Native Key Provider
2. Unselect 'Use key provider only with TPM protected ESXi hosts' check box.
3. Create a virtual machine with a virtual trusted platform module. Refer Create a Virtual Machine with a Virtual Trusted Platform Module