Loading...
Loading...
Any ProLiant Gen10 server or Synergy Gen10 Compute Module with a TPM that has been configured as a 2.0 device in System Configuration (RBSU) containing an endorsement key certificate with public key (rsaesOaep) is not supported by OpenSSL used by VMware ESXi 7.x, 8.x or earlier.In the host log, the following error will occur:hostd.7:2023-05-25T15:19:15.419Z info hostd[2099610] [Originator@6876 sub=Hostsvc.TpmEventLogProvider] TpmEventLogProvider created hostd.7:2023-05-25T15:19:15.430Z error hostd[2099610] [Originator@6876 sub=Libs] Tpm2Cmd: DictionaryAttackLockReset: (0x921) TPM_RC_LOCKOUT hostd.7:2023-05-25T15:19:15.430Z info hostd[2099610] [Originator@6876 sub=Libs] Tpm2Cmd: Unable to reset the dictionary attack counter hostd.7:2023-05-25T15:19:15.469Z error hostd[2099610] [Originator@6876 sub=Libs] Tpm2Cmd: EK does not match EK certificate by public key content hostd.7:2023-05-25T15:19:15.479Z error hostd[2099610] [Originator@6876 sub=Libs] Tpm2Cmd: NV_ReadPublic: (0x18b) Unknown hostd.7:2023-05-25T15:19:15.479Z info hostd[2099610] [Originator@6876 sub=Libs] Tpm2Cmd: Vendor provided RSA endorsement key template is not present in NV memory. Using default template per TGC spec hostd.7:2023-05-25T15:19:15.490Z error hostd[2099610] [Originator@6876 sub=Libs] Tpm2Cmd: NV_ReadPublic: (0x18b) Unknown hostd.7:2023-05-25T15:19:15.569Z error hostd[2099610] [Originator@6876 sub=Libs] Tpm2Cmd: EK does not match EK certificate by public key content hostd.7:2023-05-25T15:19:15.569Z error hostd[2099610] [Originator@6876 sub=Hostsvc.Tpm20Provider] Unable to provision default rsa endorsement key. hostd.7:2023-05-25T15:19:15.569Z info hostd[2099610] [Originator@6876 sub=Hostsvc.Tpm20Provider] Raised TPM Config Issue: (vim.event.EventEx) {The vCenter Server reports the following message after adding a host with the TPM2.0 feature enabled:"Host attestation is failing."
Any ProLiant/Synergy Gen10 with TPM configured for 2.0 running VMware ESXi 7.x/8.x or earlier.
The following workarounds are available:Disable the TPM in the BIOS using RBSU.ORChange the TPM setting in the BIOS from 2.0 to 1.2.Revision HistoryDocument VersionRelease DateDetails2January 31, 2025Updated to add VMware ESXi 8.0.1December 13, 2023Original Document Release.
Operating Systems Affected:VMware ESXi 6.0, VMware ESXi 6.5, VMware ESXi 6.7, VMware ESXi 7.0, VMware ESXi 8.0
Click on a version to see all relevant bugs
Hewlett Packard Enterprise Integration
Learn more about where this data comes from
Bug Scrub Advisor
Streamline upgrades with automated vendor bug scrubs
BugZero Enterprise
Wish you caught this bug sooner? Get proactive today.