TCG2 Configuration not appear on Win 11 guest (VirtualBox 7.0.9r157775)

[ElMaSkA007]

Hello experts.

I have come across the situation where on my Win 11 VM (Win 10 host) I want to have TPM 2.0 enabled. At the OS level of my Win 11 virtual machine if I run "tpm.msc" it says that it does not detect any TPM device, even though at the virtual machine configuration level it has the TPM 2.0 option enabled.

To be able to do this, I have to activate the TPM module at the UEFI level, but when I manage to enter the UEFI settings, the "TCG2 Configuration" option does not appear in the Device Manager section of UEFI, a section that does appear on another host (macOS Ventura ) that I own with another VM Win 11.

Could it be due to a bug in the Windows host version of Virtualbox? Do I have to do any extra configuration?

Thanks in advance.

[ElMaSkA007]

Hello again.

Curiously, in my Win 11 VM on a macOS Ventura host, the same problem has happened to me.

I think both have a common denominator, which is that I recently activated Bitlocker on both VMs. I think it may be the cause of this problem, but I don't see much sense in this, why does the VM say that it doesn't detect any TPM when I activate Bitlocker? And what is more worrying, why in UEFI does the TCG2 Configuration option disappear in the Device Manager, not even being able to enable or disable the TPM?

Best regards.

[ElMaSkA007]

Hello again.

Googling I found the following Microsoft article:

https://learn.microsoft.com/en-us/windo ... of-the-tpm

where it says the following:

If you're attempting to set up BitLocker with the TPM, check which TPM driver is installed on the computer. We recommend always using one of the TPM drivers that is provided by Microsoft and is protected with BitLocker. If a non-Microsoft TPM driver is installed, it may prevent the default TPM driver from loading and cause BitLocker to report that a TPM isn't present on the computer. If you have a non-Microsoft driver installed, remove it, and then allow the operating system to initialize the TPM

any suggestion from you?

Br.

[scottgus1]

Just to let you know, we're not ignoring this. Personally, I have no idea how to troubleshoot it. Some forum gurus who can may be along soon.

[ElMaSkA007]

Hi again experts.

To add more information about my problem, in the device manager of my Win 11 virtual machine it appears that the TPM shows an error (please see the attachment).

This problem did not appear when I was before with the same virtual machine but with the Windows 10 version (without Bitlocker activated).

any suggestions?

Br.

[scottgus1]

The only thing I can suggest now is to try setting up a new test Windows 11 VM with a fresh install, and try to turn BitLocker on right away, and see what happens.

[ElMaSkA007]

Hi scottgus1.

I have followed your suggestion and the problem no longer occurs, it does not even ask me for the recovery key of the encrypted partition C:.

But what I am suffering now are continuous VM freezes. I have observed the following messages in the VM logs:

Code: Select all

00:11:06.235004 VMMDev: vmmDevHeartbeatFlatlinedTimer: Guest seems to be unresponsive. Last heartbeat received 4 seconds ago
00:12:05.160775 TM: Giving up catch-up attempt at a 60 026 992 115 ns lag; new total: 60 026 992 115 ns
00:13:07.447458 TM: Giving up catch-up attempt at a 60 002 018 569 ns lag; new total: 120 029 010 684 ns
00:13:14.780160 Changing the VM state from 'RUNNING' to 'SUSPENDING'
00:13:14.796020 AIOMgr: Endpoint for file '/Users/Arturo/VirtualBox VMs/Windows 11 Nokia/Windows 11 Nokia.vdi' (flags 000c0781) created successfully
00:13:14.796638 PDMR3Suspend: 16 383 214 ns run time
00:13:14.796667 Changing the VM state from 'SUSPENDING' to 'SUSPENDED'
00:13:14.796684 Console: Machine state changed to 'Paused'

I remember that in my problematic VM, I had to configure the following configuration commands, so I have done the same in my fresh Win 11 VM (viewtopic.php?t=107794&start=15)

9.26. Support for Keyboard Indicator Synchronization

Code: Select all

VBoxManage setextradata "VM Name" GUI/HidLedsSync 0

or

9.25. Passing Through SSE4.1/SSE4.2 Instructions

Code: Select all

$ VBoxManage setextradata VM-name \
VBoxInternal/CPUM/IsaExts/SSE4.1 0
$ VBoxManage setextradata VM-name \
VBoxInternal/CPUM/IsaExts/SSE4.2 0

but I have to note that it did not solve the problem of continuous freezing.

This could be considered outside of this thread and I would have to open a different thread, but I'm posting it for your information.

Br.

[ElMaSkA007]

Hi again.

What I do not understand about all this is that when I previously had Win 10 in my VM and the TPM module was detected, when I upgraded to Win 11 and activating Bitlocker, the OS did not detect the TPM module (it continues to show the same screenshot What I put).

What's more, I just did the test of disabling Bitlocker on my Win 11 VM on a Win 10 host and my VM's OS continues without detecting the TPM device, with the most aggravating consequence that I can't use Bitlocker again.

Br.

[fth0]

I believe there's not enough experience with the VirtualBox 7.0 TPM support in the VirtualBox forums yet. I'd suggest to create a ticket in the Bugtracker.

[ElMaSkA007]

Hi again.

To add something else to this case, yesterday I started the Win 11 OS recovery process of my VM on Win 10 host and it did not solve the problem, in the device manager the same message was still appearing in the TPM.

Thanks fth0, soon I will create a ticket for this case.

Br.

[ElMaSkA007]

There is another detail that I overlooked in my previous post and that is that I also downgraded the Virtualbox version to the stable 7.0.8-156789, also without success.

Br.

[fth0]

FWIW, another user with a similar issue created 21741 on my behalf. Depending on the similarity of your issue, you could contribute to that ticket instead of creating your own.

[ElMaSkA007]

Hi fth0.

Thanks for your recommendation.

I'll take a look at that ticket.

Br.

[ElMaSkA007]

Hi again fth0.

The details of this thread I have shared in the ticket you told me.

Br.

[kyuz0]

Does anybody know if we can do anything to get visibility to the open bug report about this. As far as I can see it's been open for 6 days but it's not been picked up yet, I wonder if the format of the bug report makes it less palatable to be picked up.