Symptoms

TPM 2.0 device detected but a connection cannot be established.

Cause

ESXi 6.7 and above only support SHA-256.

Resolution

Requirements: UEFI boot mode and Secure boot enabledRemove host from vCenter before proceeding with steps below:1. While booting your system, press F2 to enter System Setup.2. On the System Setup Main Menu screen, click System BIOS > System Security Settings.3. From the TPM Security option, select On.4. Save the settings.5. Restart your system.6. Enter System Setup again.7. On the System Setup Main Menu screen, click System BIOS > System Security Settings.8. Select the TPM Advanced Settings option.9. From the TPM2 Algorithm Selection option, select SHA256, then go back to System Security Settings screen.10. On the System Security Settings screen, from the Intel TXT option, select On.11. Save the settings.12. Restart your system.

Support Cases