Emulated Trusted Platform Module (vTPM) Device Missing from Instance

Problem

• An Emulated Trusted Platform Module (vTPM) is no longer detected within your Virtual Machine/Instance.

• No TPM device is defined within the corresponding Libvirt XML defined for that Instance, e.g.

Bash

...
<devices>
  <tpm model='tpm-tis'>
    <backend type='emulator' version='2.0'>
    </backend>
  </tpm>
</devices>
...

• The following is not observed on start/restart of the pf9-ostackhost (nova-compute) service within /var/log/pf9/ostackhost.log .

Bash

INFO nova.virt.libvirt.driver [-] Enabling emulated TPM support

Environment

• Platform9 Managed OpenStack - v5.3, v5.4

• Nova

• Emulated Trusted Platform Module (vTPM)

Cause

In v5.3+, a CPU compatibility check was added to the code related to enabling vTPM support within Nova which will fail if cpu_model is not set, and cpu_mode != custom.

In v5.2 and prior versions of PMO, vTPM was enabled with the swtpm_enabled flag set to True under the [compute] section in /opt/pf9/etc/nova/conf.d/nova override.conf file on the hypervisor.

Resolution

1. Check if you're using 5.4.0-4662 or higher version of pf9-ostackhost .

2. If not, reach out to Support.