


Make sure to tick Enable Windows Virtualization Based Security.Īdd the Trusted Platform Module in Step 7 - Customize Hardware. I recommend using the latest version which is HW 19 ( ESXi 7.0 U2) at the moment.Ĭurrently, Windows 11 is not listed as a supported guest OS, so just select Windows 10 (64-bit). Set the hardware compatibility to be at least vSphere 6.7. The compatibility warning "Datastore does not match current VM policy" can be ignored. Make sure that the VM Storage Policy is set to VM Encryption Policy. Windows Virtualization Based Security enabledĬreate a new Virtual Machine and enable Encrypt this virtual machine in Step 4.With the key provider enabled, you can use the vTPM feature in Virtual Machines that fulfill the following requirements: p12 file which needs to be kept in a safe location. Make sure that no popup blockers are active. As this is a lab environment, I've disabled password protection.As a security precaution, the Key Provider has to be backed up at least once to be eligible for use.This allows you to use vTPM on ESXi hosts that do not have a TPM chip. Give the Key Provider a name and disable "Use key provider only with TPM protected ESXi hosts".Navigate to vCenter > Configure > Seurity > Key Provider.Enabling the Key provider is done on vCenter level.

Since vSphere 7.0, vCenter Server comes with a native Key Provider, removing the need for an external KMS. ISO file.ĭownload Windows 11 Create Windows 11 VM with Virtual Trusted Platform ModuleĪs a prerequisite to enable vTPM for Virtual Machines, you have to provide a Key Provider. There are two options - you can use the Installation Media creation tool, or just download a prepared. If you want to test-drive Windows 11 as a Virtual Machine, you can download the installation Media from a website provided by Microsoft. This article explains two options to install Windows 11 by either disabling the TPM check, or by adding a Virtual Trusted Platform Module (vTPM) to the Virtual Machine. There is no further information on why the setup fails.īy using SHIFT + F10 and notepad x:\windows\panther\setuperr.log or type x:\windows\panther\setuperr.log, you can verify that the reason for the failed setup is a missing TPM Chip: When you try to install Windows 11 as a Virtual Machine on VMware ESXi, the installation fails with a " This PC can't run Windows 11" error. The latest release of Windows 11 requires a Trusted Platform Module (TPM) 2.0 chip.
