Emulated Trusted Platform Module (vTPM) Device Missing from Instance

Problem

  • An Emulated Trusted Platform Module (vTPM) is no longer detected within your Virtual Machine/Instance.

  • No TPM device is defined within the corresponding Libvirt XML defined for that Instance, e.g.

...
<devices>
<tpm model='tpm-tis'>
<backend type='emulator' version='2.0'>
</backend>
</tpm>
</devices>
...

  • The following is not observed on start/restart of the pf9-ostackhost (nova-compute) service within /var/log/pf9/ostackhost.log .

INFO nova.virt.libvirt.driver [-] Enabling emulated TPM support

Environment

  • Platform9 Managed OpenStack - v5.3, v5.4

  • Nova

  • Emulated Trusted Platform Module (vTPM)

Cause

In v5.3+, a CPU compatibility check was added to the code related to enabling vTPM support within Nova which will fail if cpu_model is not set, and cpu_mode != custom.

In v5.2 and prior versions of PMO, vTPM was enabled with the swtpm_enabled flag set to True under the [compute] section in /opt/pf9/etc/nova/conf.d/nova override.conf file on the hypervisor.

Resolution

  1. Check if you're using 5.4.0-4662 or higher version of pf9-ostackhost .

  2. If not, reach out to Support.


© 2025 Platform9. All Rights Reserved

On This Page
Emulated Trusted Platform Module (vTPM) Device Missing from InstanceProblemEnvironmentCauseResolution