Hyper-V 2019 Server enable tpm

Question

Hi,
when I enable the tpm for the 2019 server datacenter installation I receive an error.

It states "Error applying Security changes; setting the key protector failed; Access Denied" I created a virtual tpm on my host machine (tpmvscmgr.exe create /name tpmvsc /pin default /adminkey random /generate). However I do not see the device. Enhanced session is turned off and the guest vm is turned off.

Any help would be appreciated. Host is windows 10 pro if that matters.

Thanks

Answer 1

Hello SecretAgent187,

Have you also enabled TPM on the virtual machine?

Please check this steps:

With the VM Turned OFF. From the HyperV Manager, open the settings of the VM.
In Settings for the VM, go to Security and tick Enable Trusted Platform Module

From a Powershell as administrator run:

import-module Hyper-V
$owner = Get-HgsGuardian UntrustedGuardian
$kp = New-HgsKeyProtector -Owner $owner -AllowUntrustedRoot
Set-VMKeyProtector -VMName <yourVMname> -KeyProtector $kp.RawData
Enable-VMTPM -VMName <VM_Name>

You may now start the VM and enable Bitlocker from within the OS.

Hope this helps with your query,

---

--If the reply is helpful, please Upvote and Accept as answer--