Hyper-V 2019 Server enable tpm

Secretagent187 1 Reputation point
2021-09-25T04:39:46.58+00:00

Hi,
when I enable the tpm for the 2019 server datacenter installation I receive an error.

It states "Error applying Security changes; setting the key protector failed; Access Denied" I created a virtual tpm on my host machine (tpmvscmgr.exe create /name tpmvsc /pin default /adminkey random /generate). However I do not see the device. Enhanced session is turned off and the guest vm is turned off.

Any help would be appreciated. Host is windows 10 pro if that matters.

Thanks

Hyper-V
Hyper-V
A Windows technology providing a hypervisor-based virtualization solution enabling customers to consolidate workloads onto a single server.
2,557 questions
Windows Server Security
Windows Server Security
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
1,732 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Limitless Technology 39,391 Reputation points
    2021-09-27T10:31:58.783+00:00

    Hello SecretAgent187,

    Have you also enabled TPM on the virtual machine?

    Please check this steps:

    With the VM Turned OFF. From the HyperV Manager, open the settings of the VM.
    In Settings for the VM, go to Security and tick Enable Trusted Platform Module

    From a Powershell as administrator run:

    import-module Hyper-V
    $owner = Get-HgsGuardian UntrustedGuardian
    $kp = New-HgsKeyProtector -Owner $owner -AllowUntrustedRoot
    Set-VMKeyProtector -VMName <yourVMname> -KeyProtector $kp.RawData
    Enable-VMTPM -VMName <VM_Name>

    You may now start the VM and enable Bitlocker from within the OS.

    Hope this helps with your query,

    --If the reply is helpful, please Upvote and Accept as answer--

    0 comments