Emulated Trusted Platform Module (vTPM) Device Missing from Instance

Problem

• An Emulated Trusted Platform Module (vTPM) is no longer detected within your Virtual Machine/Instance.
• No TPM device is defined within the corresponding Libvirt XML defined for that Instance, e.g.

...

<devices>

  <tpm model='tpm-tis'>

    <backend type='emulator' version='2.0'>

    </backend>

  </tpm>

</devices>

...

• The following is not observed on start/restart of the pf9-ostackhost (nova-compute) service within /var/log/pf9/ostackhost.log .

INFO nova.virt.libvirt.driver [-] Enabling emulated TPM support

Environment

• Platform9 Managed OpenStack - v5.3, v5.4
• Nova
• Emulated Trusted Platform Module (vTPM)

Cause

In v5.3+, a CPU compatibility check was added to the code related to enabling vTPM support within Nova which will fail if cpu_model is not set, and cpu_mode != custom.

In v5.2 and prior versions of PMO, vTPM was enabled with the swtpm_enabled flag set to True under the [compute] section in /opt/pf9/etc/nova/conf.d/nova override.conf file on the hypervisor.

Resolution

1. Check if you're using 5.4.0-4662 or higher version of pf9-ostackhost .
2. If not, reach out to Support.