Re: [pve-devel] [RFC 0/2] Initial TPM support for VMs

2021-07-16 Thread Thomas Lamprecht
On 15.07.21 16:23, Stefan Reiter wrote: > Design decision: 'swtpm' requires a *directory* per VM to store data, the > files > themselves are rather small (8.5kB for an initialized TPM 2.0 w/ BitLocker > enabled). To allow for easier HA I went with a path in '/etc/pve/priv' for > now, > but that c

[pve-devel] [RFC 0/2] Initial TPM support for VMs

2021-07-15 Thread Stefan Reiter
Makes Windows 11 (test build) happy: https://i.imgur.com/kZ0Mpnr.jpeg Tested under Linux as well, works with (updated) OVMF and SeaBIOS, though SeaBIOS requires clearing via the BIOS setup screen and may not support all features it seems (e.g. Windows shows the TPM, but doesn't allow BitLocker, pr