Hello,
I'm testing Server 2019 out as a migration path but I'm having an issue with Hyper-V on where it fails to start any VM that has a vTPM enabled. I tried to enable a vTPM on a test VM, and initially it failed with the error:
TimeCreated : 11/26/2019 8:12:15 PM
ProviderName : Microsoft-Windows-Hyper-V-VMMS
Id : 15500
Message : 'vtpm_test' failed to start worker process: The object was not found. (0xC0000225). (Virtual machine ID CFBC4A73-...)
Since this was a test hypervisor, rather than troubleshoot the error I wiped it clean, and re-installed Server 2019 DataCenter from scratch, re-installed the Hyper-V role, and tried to provision another fresh VM with vTPM. However I received an error
that the key protector couldn't be unwrapped:
TimeCreated : 11/26/2019 8:45:01 PM
ProviderName : Microsoft-Windows-HostGuardianService-Client
Id : 2014
Message : The Host Guardian Service Client failed to unwrap a Key Protector on behalf of a calling process. This event will normally correspond to a failure to startup a shielded virtual machine. Consult the description for further details. This could be related to an attestation issue, a Key Protection Server issue, or a network connectivity issue:
System.IO.FileNotFoundException: Could not find file 'C:\Windows\system32\config\VSMIDK'.
File name: 'C:\Windows\system32\config\VSMIDK'
at Microsoft.Windows.KdsClient.HgsClient.UnwrapProtectionDescriptor(Byte[] ingressProtectionDescriptor, Byte[]& encryptedTransferKey, Byte[]& encryptedWrappingKey, Byte[]& encryptedKeys)
at Microsoft.Windows.KdsClient.Interop.ManagedEntry.UnwrapKeyProtector(IntPtr keyProtectorPointer, IntPtr unwrappedKpPointer, IntPtr errorContextPointer)
Doing some digging around, this file is supposed to be auto-created but it wasn't, so I just went ahead and copied it over from one of my Server 2016 installs. After that, I still receive the same error when trying to add a TPM to a VM and start it:
TimeCreated : 11/26/2019 9:13:15 PM
ProviderName : Microsoft-Windows-Hyper-V-VMMS
Id : 15500
Message : 'vtpm_test' failed to start worker process: The object was not found. (0xC0000225). (Virtual machine ID ED380AFD-...)
It's worth mentioning that VMs start without a vTPM and I've also tried installing the HostGuardian feature to see if that helps. Also, I'm not experiencing this issue on a fresh Windows Server 2016 install nor on the established Windows Server 2016 boxes
I have. Any thoughts as to what may be causing this issue?