How can we disable vTPM(Trusted platform module) for Windows Virtual machine using powershell script

Question

How can we disable vTPM(Trusted platform module) for Windows Virtual machine using powershell script

ishan saxena 60

We are trying to move our windows 11 VM from one cluster to another which requires vTPM (Trusted platform module) to be disabled. After re-enabling vTPM after performing the migration we get tmp error - C0090016, TPM has malfunctioned Microsoft 365 Sign-in Error

Is there a way to disable vTPM using powershell for windows 11 rather than doing on VM security setting from azure portal.

Accepted answer

0 additional answers

Your answer

Answer 1

Sudheer Reddy 2,055 Microsoft External Staff Moderator

Hi ishan saxena ,

Thank you for reaching out us on Microsoft Q&A forum.

You can follow below PowerShell command to disable vTPM on a windows 11 VM when hosted in a Azure environment. You need to modify UEFI properties of a Virtual Machine.

$VM = Get-AzVM -ResourceGroupName "<your resource group name>" -VMName "<your VM name>" Set-AzVMUefi -VM $VM -EnableVtpm $false -EnableSecureBoot $false

You can use the above PowerShell command and modify the input values based on your requirement before executing the command.

You can follow below documentation for more information ;

https://stackoverflow.com/questions/76627839/is-it-possible-to-make-uefi-settings-on-off-using-powershell-command-in-a-virtua

https://learn.microsoft.com/en-us/powershell/module/az.compute/set-azvmuefi?view=azps-13.1.0

If the information is helpful, please consider by clicking the "Accept Answer" & "Upvote".

If you have any further queries, please let us know we are glad to help you.

Sudheer Reddy 2,055 Reputation points Microsoft External Staff Moderator

2025-01-20T14:48:57.6+00:00

Hi ishan saxena ,

I just wanted to check if you had a chance to review my answer. If you found it helpful, could you kindly click the “Accept Answer and upvote” on my post.

This will help increase its visibility of this question for other members of the Microsoft Q&A community.
ishan saxena 60 Reputation points

2025-01-20T18:53:47.86+00:00

Hi Markpuram,

Thanks a lot for the above information, I one slight query can you please share the query for running the command into VM's internal powershell rather on Azure shell?
Sudheer Reddy 2,055 Reputation points Microsoft External Staff Moderator

2025-01-21T17:32:33.0466667+00:00

Hi Ishan Saxena ,

Thank you for reaching out to us regarding your query.

To disable the vTPM (Trusted Platform Module) for a Windows Virtual Machine (VM) in Azure, you cannot directly run a command inside the VM's internal PowerShell because vTPM is managed by the hypervisor (e.g., Azure or Hyper-V), not within the VM itself. Instead, you have to use Azure management tools like Azure PowerShell or Azure CLI as it is managed at the platform level to modify the VM's UEFI settings.

It is not available within the guest operating system of the VM operates outside of the VM's internal environment.

If the information is helpful, please consider by clicking the "Accept Answer" & "Upvote".

If you need further assistance, please let me know, and I would be happy to help.

Thank You.

Share via

How can we disable vTPM(Trusted platform module) for Windows Virtual machine using powershell script

0 additional answers

Your answer