TPM module enable for a Guest VM which is on SUSE KVM

SUSE Linux Enterprise Server SLES Virtualization
1

Hello,

We are using SUSE KVM as the virtualization layer, on top of which multiple guest VMs are deployed.

Our KVM hosts are running on SLES 15 SP5, 15 SP6, and 15 SP7.

For one of the guest VMs, we attempted to enable the TPM module. After enabling TPM, the VM fails to start when hosted on SLES 15 SP5.

However, when we tested the same TPM configuration on another guest VM hosted on SLES 15 SP6, the VM started successfully.

Based on this behavior, we would like to confirm whether TPM is not supported or has limitations on SLES 15 SP5 KVM hosts.

Thanks,

Abhishek

2

@AbhishekReddy I would start by comparing the Virtual machine xml files in virt-manager for differences in the TPM setup. If you remove the TPM setup in SLES 15 SP5, does the system boot?

3

Hello @malcolmlewis ,

Thanks for the update.!

Yes, if i remove TPM module, then VM is booting in 15Sp5 KVM Host

Thanks,

Abhishek

4

@AbhishekReddy So you compared settings for TPM, are you using TPM 1.2 or TPM 2.0?

See 22.4 here: https://documentation.suse.com/sles/15-SP5/html/SLES-all/tpm.html

5

@malcolmlewis , We are using 2.0 latest version for TPM. also, i gone thru the mentioned article as well. Still its not able to boot the VM in SLES15SP5

6

@AbhishekReddy So on the host swtpm is installed, what guest OS are you running?

7

@malcolmlewis , sorry for late reply

Yes, on the host swtpm was installed

Guest OS is win 2022

8

@AbhishekReddy well the only other thing I can think of is the VM BIOS, have TPM 2.0 enabled and then check here with F2 when system is booting. Else it’s likely a bug which you would need to create a Support Request for.

9

Thanks @malcolmlewis , Let me raise a support case.