Why am I missing a Trusted Platform Module in hyper-V Gen 2 machines running on Windows 10 v1511 or later ?

Introduction

This is a quick post as I saw this problem this morning on a computer running Windows 10 TH2 release [Version 1511 or build 10.0.10586]. When checking for the new Virtual TPM feature it wasn’t present on my Hyper-V Gen 2 VM but it was present on a colleagues TH2 install, both of us were at the same version of Windows 10 v1511.

Problem

In Hyper-V gen 2 virtual machines you do not see any reference to the new Trusted Platform Module (aka the virtual TPM) under Security in the Generation 2 virtual machine settings.

no tpm shownSolution

If you are using Windows 10 version 1607, then the Isolated User Mode feature (which is required for this functionality) is built into the Hyperv Role, see this technet post for details.

If however you are running Windows 10 version 1511, then verify if the computer was installed with a clean install of Windows 10 or upgraded from a previous Windows 10 build.

If it had Hyper-V installed previously and was then upgraded (like mine from Windows 10 build 10240 to 10586) simply uninstall the Hyper-V feature and then reboot when prompted, then reinstall it along with installing the Isolated User Mode feature which is required for this functionality.

The un-installation of the Hyper-V features will not uninstall or remove any of your vm’s which will appear back in Hyper-V manager after the feature is reinstalled.

Note: The screenshot below is from Windows 10 v1511 (build 10.0.10586)

isolated user modeAfter installing these Windows features, reboot when requested and all will be good again. Notice that the Trusted Platform Module is present in the screenshot below.

after hyperv reinstall2thanks Zvonomir for discussing this with me

cheers

niall

 

This entry was posted in 1607, Credential Guard, Isolated User Mode, Windows 10. Bookmark the permalink.

One Response to Why am I missing a Trusted Platform Module in hyper-V Gen 2 machines running on Windows 10 v1511 or later ?

  1. bertelsenbo says:

    Hi Niall,

    It seems that the “Isolated User Mode” has been included in Hyper-V Windows 10 1607 and the feature is no longer listed. According to this:
    https://technet.microsoft.com/en-us/itpro/windows/whats-new/whats-new-windows-10-version-1607?f=255&MSPPError=-2147217396

    However, I and others, are experiencing that Hyper-V still requests the feature to be installed in 1607 when trying to enable TPM on the Hyper-V guests:
    https://social.technet.microsoft.com/Forums/en-US/f36dd7d6-b19e-445d-a8fe-e82632157eb5/virtual-tpm-with-hyperv-on-windows-10-enterprise-1607-x64-no-isolated-user-mode?forum=win10itprovirt

Leave a Reply