Symptoms
TPM attestation failure alarms in VCSA.
Cause
Some TPM firmware use larger than supported RSA key blobs. Due to this, some of the attestation APIs fail with error code TSS2_SYS_RC_INSUFFICIENT_BUFFER resulting in attestation alarms in VCSA.To conform with these larger RSA key blobs, some changes were made in VMware vSphere 7.0U3i and VMware vSphere 8.0P01. Any vSphere versions (with a TPM chip) older than VMware vSphere 7.0U3i and VMware vSphere 8.0P01 using such firmware will fail attestation.
Resolution
To resolve the issue, please upgrade to VMware vSphere 7.0U3i or VMware vSphere 8.0P01.