Quantcast
Channel: Hyper-V forum
Viewing all articles
Browse latest Browse all 19461

Server 2019 - Error 0xc0000225 When Adding vTPM

$
0
0

Hello,

I'm testing Server 2019 out as a migration path but I'm having an issue with Hyper-V on where it fails to start any VM that has a vTPM enabled. I tried to enable a vTPM on a test VM, and initially it failed with the error:

TimeCreated  : 11/26/2019 8:12:15 PM
ProviderName : Microsoft-Windows-Hyper-V-VMMS
Id           : 15500
Message      : 'vtpm_test' failed to start worker process: The object was not found. (0xC0000225). (Virtual machine ID CFBC4A73-...)

Since this was a test hypervisor,  rather than troubleshoot the error I wiped it clean, and re-installed Server 2019 DataCenter from scratch, re-installed the Hyper-V role, and tried to provision another fresh VM with vTPM. However I received an error that the key protector couldn't be unwrapped:

TimeCreated  : 11/26/2019 8:45:01 PM
ProviderName : Microsoft-Windows-HostGuardianService-Client
Id           : 2014
Message      : The Host Guardian Service Client failed to unwrap a Key Protector on behalf of a calling process. This event will normally correspond to a failure to startup a shielded virtual machine. Consult the description for further details. This could be related to an attestation issue, a Key Protection Server issue, or a network connectivity issue:

               System.IO.FileNotFoundException: Could not find file 'C:\Windows\system32\config\VSMIDK'.
               File name: 'C:\Windows\system32\config\VSMIDK'
                  at Microsoft.Windows.KdsClient.HgsClient.UnwrapProtectionDescriptor(Byte[] ingressProtectionDescriptor, Byte[]& encryptedTransferKey, Byte[]& encryptedWrappingKey, Byte[]& encryptedKeys)
                  at Microsoft.Windows.KdsClient.Interop.ManagedEntry.UnwrapKeyProtector(IntPtr keyProtectorPointer, IntPtr unwrappedKpPointer, IntPtr errorContextPointer)

Doing some digging around, this file is supposed to be auto-created but it wasn't, so I just went ahead and copied it over from one of my Server 2016 installs. After that, I still receive the same error when trying to add a TPM to a VM and start it:

TimeCreated  : 11/26/2019 9:13:15 PM
ProviderName : Microsoft-Windows-Hyper-V-VMMS
Id           : 15500
Message      : 'vtpm_test' failed to start worker process: The object was not found. (0xC0000225). (Virtual machine ID ED380AFD-...)

It's worth mentioning that VMs start without a vTPM and I've also tried installing the HostGuardian feature to see if that helps. Also, I'm not experiencing this issue on a fresh Windows Server 2016 install nor on the established Windows Server 2016 boxes I have. Any thoughts as to what may be causing this issue?


Viewing all articles
Browse latest Browse all 19461

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>