TPM chip and ESXi 5.5

Hello,
I have question about proper enabling TPM functionality in VMWare.
I installed TPM chip in Cisco blade UCS B200-M3 and I enabled TXT and TPM functionality in BIOS according to Cisco user manual.
Blade rebooted with no problems and bios does show TPM configured (attached screenshot).
Unfortunately I can not figure out how to enabled TPM functionality in VMWare.
The esxcli command shows lack of TPM:
# esxcli hardware trustedboot get
Drtm Enabled: false
Tpm Present: false
The query "QueryTpmAttestationReport" in webinterface of the ESXi and vCenter
does not show any PCR entries (screenshot attached). In addition bios shows entry "TPM Owner status: unowned".
I can not find any option/setting in vCenter or ESXi to manipulate with TPM functionality.
I searched through KBs in Cisco and VMWare and I can not find any specific information about troubleshooting TPM in ESXi or vCenter.
I would appreciate some help in this matter.
Thank you,
Robert

The minimum version, for both Windows 8 and 8.1, is ESXi 5.1
To upgrade, you need to upgrade at least one of your hosts to ESXi 5.1. To manage that host with vCenter, you will need to upgrade vCenter to 5.1 as well, which will manage your ESXi 5.0 and 5.1 hosts. See the following link for interoperability: http://partnerweb.vmware.com/comp_guide2/sim/interop_matrix.php
Here is the link to upgrade a host to ESXi 5.1:
http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=2032757
Here is the link to upgrade from vCenter 5.0 to 5.1:
http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=2032283
I strongly recommend you use the VMware Interoperability Guide, in case you have older ESXi hosts (i.e. 3.5) that will no longer be managed when you move to vCenter 5.1.
Hope that helps.

Similar Messages

Script to locate if systems has a TPM chip and it's status if it does.

I am looking for a script that would scan AD for a list of computers and then query them to see if they have a TPM chip and then what the status of each one is.
I have been looking around and so far haven't come across one. Any help would be really appreciated for this scripting noob.
Edited: I also have SCCM and ConfigureSoft's ECM in my company, so maybe those could be leveraged to do this but i haven't found the way to do it yet either.

Hi,
Here is a function I wrote to help identify the TPM and check its status.
The problem is, most TPM's come from the fasctory turned OFF. If that is the case,
Your computer will not know if it has one or not.
Turning the TPM on requires at least one reboot and possibly two or three.
I have a bunch of vbScripts I wrote that will check to see if the TPM is;
1. Enabled
2. Activated
3. Owned
Function ChkTPM {
$NOW = (Get-Date)
#check TPM version #. Must be 1.2
$strComputer = "."
$TPMOn = $False
$colItems = Get-WmiObject -class Win32_Tpm -namespace "root\CIMV2\Security\MicrosoftTpm" -computername $strComputer
   foreach ($objItem In $colItems) {
     Write-Host "SpecVersion: $objItem.SpecVersion"
     $SpecVersion = [string]($objItem.SpecVersion)
If ($SpecVersion -match "1.2") {
  Write-Host "TPM is version 1.2"
  Set-ItemProperty -path $path -name "TPM_Version" -Value "1.2" | Out-Null
  Add-Content $strLogDirFile -Value ("$NOW TPM is version 1.2")
Else {
   Write-Host "TPM is NOT version 1.2."
  Set-ItemProperty -path $path -name "TPM_Version" -Value $SpecVersion | Out-Null
  Add-Content $strLogDirFile -Value ("$NOW TPM is NOT version 1.2")
  Break
#Check if TPM is enabled and Activated
$path="HKLM:\SOFTWARE\Medtronic\Encryption"
$colItems = Get-WmiObject -class Win32_Tpm -namespace "root\CIMV2\Security\MicrosoftTpm" -computername $strComputer
foreach ($objItem in $colItems) {
$a = $objItem.IsEnabled()
$b = $objItem.IsActivated()
$c = $objItem.IsOwned()
$TPMOn = $True
Set-ItemProperty -path $path -name "TPM-On" -Value "True   $NOW "| Out-Null
  If ($a) {
    Write-Host "TPM Is Enabled: $a"
   Set-ItemProperty -path $path -name "TPM_Enabled" -Value "True $NOW "| Out-Null
   Add-Content $strLogDirFile -Value ("$NOW   TPM_Enabled True")
  Else {
   Set-ItemProperty -path $path -name "TPM_Enabled" -Value "False $NOW" | Out-Null
   Add-Content $strLogDirFile -Value ("$NOW   TPM_Enabled False")
  If ($b) {
    Write-Host "TPM Is Activated: $b"
   Set-ItemProperty -path $path -name "TPM_Activated" -Value "True $NOW" | Out-Null
   Add-Content $strLogDirFile -Value ("$NOW   TPM_Activated True")
  Else {
   Set-ItemProperty -path $path -name "TPM_Activated" -Value "False $NOW" | Out-Null
   Add-Content $strLogDirFile -Value ("$NOW   TPM_Activated False")
  If ($c) {
    Write-Host "TPM Is Owned: $c"
   Set-ItemProperty -path $path -name "TPM_Owned" -Value "True $NOW" | Out-Null
   Add-Content $strLogDirFile -Value ("$NOW   TPM_Owned True")
  Else {
   Add-Content $strLogDirFile -Value ("$NOW   TPM_Owned False")
   Set-ItemProperty -path $path -name "TPM_Owned" -Value "False $NOW" | Out-Null
If ($TPMOn = $False) {
   Add-Content $strLogDirFile -Value ("$NOW   Trusted Platform Module may be turned off")
Write-Host "Trusted Platform Module may be turned off"
Set-ItemProperty -path $path -name "TPM_Enabled" -Value "TPM Is Not Enabled in BIOS $NOW" | Out-Null
Start-Sleep 5
Break

How do I find out if my laptop has the TPM chip on the motherboard?

Hi,
Laptop model - HP Pavilion dv9260us. Product ID - RP243UA#ABA SR No - CNF7134YJK
OS - Windows Vista Ultimate Build 6002.
I downloaded and installed the Bitlocker from Windows Extras for Vista ultimate under Windows Update. I got a message stating:
A TPM was not found. A TPM is required to turn on Bitlocker. If your computer has a TPM, then contact the computer manufacturer for Bitlocker-compatible BIOS. Currently, I have BIOS version F.2E
Thanks.
Pedhambe
This question was solved.
View Solution.

Hi:
I would not have any idea how you would go about getting a TPM chip added to the motherboard, or if it is even possible.
I am not a PC repair tech or electronics technician by trade.
If your work requires the need of a TPM chip, I would recommend you purchase an off lease or new HP business notebook, and make sure the model you want comes with one.
I know the Elitebook notebook models do, and the old ncXXXX models do.
Some of the Probook models have them too, but not all of them.

RE: T420s TPM - bitlocker and security

hey all,
I have t420s with top specs and running windows 7 ultimate.
I used bit lcoker to encrypt my drive. Now I'm wondering, I want to reduce surface of attack as much as possible, so I restricted all boot options but internal disk drive, put password on bios, disabled finger print sensor.
I enabled bit locker, and felt comfortable for a while, then I realized that all my defense rests on the fact that BIOS is password protected, so all it takes for a hackers is to dissamble computer remove the battery - reset bios, enable other boot options and then start hacking, so what i did is put on top of that password on power up, but I really dont like it, I d rather have system boot directly to windows and then logong with my password.
Am I missing something here? If you remove batter and reset bios, would you also reset the TPM chip with key and render disk encrypted with bit unusable, or no?
Please advise!
Many thanks in advance !
X301, 128 SSD, 4GB, Vista 32-Bit Ultimate

Well but I dont want to use boot password, BIOS password is ON, so i want system to boot straight into OS.
So removing batter does not reset bios passowrd? - is that correct? And does not do anything with TPM keys right?
X301, 128 SSD, 4GB, Vista 32-Bit Ultimate

Need to determine if TPM chip is installed on HP Pavilion g6

Greetings. Please kindly advise if HP Pavilion g6 - 1317AX comes with a TPM chip installed.
I’m using Win 7 54 bit Ultimate and wish to run Bitlocker with TPM.
Many thanks in advance for your assistance.
This question was solved.
View Solution.

Hi,
No, no TPM chip on your computer.
Regards.
BH
**Click the KUDOS thumb up on the left to say 'Thanks'**
Make it easier for other people to find solutions by marking a Reply 'Accept as Solution' if it solves your problem.

Thinkcentre M82 TPM Chip.

Hello All,
Has anyone have any experience enabling the TPM Chip that is on M82 2929s? I need to encrypt a load of machines using bitlocker but when I go through the set, I get an error message that tells me there isn't a TPM chip availiable. The specs on the M82s I have say there should be a TPM, but even when I go into the BIOS I cannot find any mention of a TPM!
Have I missed something? Any help would much most appreciated!

The specs on a GTX 970 are:
145   Graphics Card Power (W)
500   Minimum System Power Requirement (W)
2x 6-pins   Supplementary power connectors
Even with an upgraded power supply, the case doesn't have the air flow to cool a card like this.   In addition, the BIOS probably won't recognize and support this model of graphics card.   ThinkCentres are business class computers, if you're wanting a gaming computer worthy of a GTX 970, best to start with a computer designed for gaming.

Tpm chip missing after turning off bitlocker in win7 ultimate

I was told that i had to turn bitlocker off in order to add a password to it. I turned off bitlocker and now my system said there is no TPM Chip?? any help would be great!

We need to know the model of laptop involved.

TPM chip on a Kirabook

Is there a TPM chip i the Kirabook? I do not see any options for enabling it and searching online has been fruitless. I use my machine for work and a TPM is pretty much a given to ensure this machine remains ultra portable instead of covered in dongles just to work.

You may want to contact KIRA Platinum Service & Support's customer support by phone, text or live chat.
- Peter

Upgrade chip and memory

Can I upgrade the chip and memory? if so what can I use. The system is a little too slow. Yes I have all the software to speed it up. Thanks
HP 2000 Notebook PC Windows 8.1 64-bit [Edited for Personal Information] AMD E-300 APU with Radeon(tm) HD Graphics microprocessor 4GB SODIMM Kinston 800MHz memory 188B KBC Version 69.18 system board F.37 system bios HGST HTS545032A7E380 SATA Disk Device Product number: E0M17UA#ABA AMD E-300 APU with Radeon(tm) HD Graphics

Here is the Service Manual:
http://h10032.www1.hp.com/ctg/Manual/c03763129.pdf
Go through Page 16-17. Each different processor is soldered to the board, so you've to replace the whole motherboard for that, you can see that their part numbers are different according to three different boards.
I suggest RAM upgrade from 4 to 8GB by adding another 4GB in the other vacant slot, with configuration DDR3 1333MHz dual channel boost.
thanks,
++Please click KUDOS / White thumb to say thanks
++Please click ACCEPT AS SOLUTION to help others, find this solution faster
**I'm a Volunteer, I do not work for HP**

SCXI-1321 Bad Chips and Function Calls

8-4-04
This message is intended for the PSE of the SCXI-1321 and that person�s manager. Please route it accordingly. I would appreciate a phone response to 8**-2**-2*** so that I might share some specific experiences.
To the managers of the SCXI product line,
I have used the SCXI-1121 with the SCXI 1321 for some time now, approximately 6 years. Our company generally uses them for full bridge pressure transducers and similar applications. I have some suggestions that would make them more saleable. I also believe that you will never know how many customers you have already lost on this product line, for the reasons given below.
1. For many years the shunt resistor on the 1321 has been vastly unusable. What SHOULD be possible is to command the shunt resistor through a Labview command, and then read the virtual channel to see the shunted value. That IS the purpose of the feature. What happens is that once you set the shunt command, then read the virtual channel, the very act of reading the channel UN-shunts the resistor. What you read is some value part way between, because the chip relay from Clare actually ramps open and closed, unlike a mechanical relay. If your timing loop to read the value is consistent, you will consistently read a BAD value. Several VI�s tried to command the shunt, then quickly read the virtual channel, then loop and do it again, and thought they had solved the problem. Further investigation showed that all that was really happening is that the readings appeared to be stable because of the fast loop time, but were actually mid-release of the shunt for all readings.
2. NI eventually starting saying �don�t use virtual channels with the shunt�. In fact, there is a channel string that starts with the word �shunt� that was recommended. The only problem with this is that the data that comes back is not scaled! Keep in mind that NI has been pushing �virtual channels� on users for many years as the way to do business, and so entire test stands are developed around them and MAX. Because we depend on MAX to do the scaling, how are we supposed to be able to read the data scaled? Does NI expect customers to duplicate the efforts of MAX for every virtual channel and scale it separately? Do I have to keep duplicate tracking of scaling information so that my virtual channels will work in the main code, but again elsewhere so that my calibration routine can read the data? This is messy, and for most customers, untenable.
3. I was told, literally, year after year and release after release, that the problem would be fixed in future versions of NI-DAQ. Each release proved that the problem was not resolved. I am sure that many customers were not repeat customers as they found the problems associated with using a simple shunt on the board. I myself needed this hardware due to the 1121/1321 parallel operation capability.
4. After years of trying to fight with the issues above, and what seemed like random problems with the shunting of channels, a second hardware related issue has finally been identified. See SRQ#600753 with Michelle Yagle. The Clare solid state relays installed on the 14 different 1321�s I bought ALL had the same defect. Imagine what this means for troubleshooting! You swap boards to try to troubleshoot, but they are all defective and so you falsely rule out the board, the problem didn�t resolve with a different board. The lot# 0027T12627 of chips covers a wide range of 1321 serial numbers (see my SRQ for details). That means this impacts a lot of potential customers. The part is rated by the manufacturer to 80C, 176F. This particular lot stops functioning as low as 96F! A great deal of testing with heat guns, shop air, and a thermocouple showed that all the chips in this lot fail somewhere between 96 and 110F, well below manufacturers specs or NI�s specs on the board. I also tested lot 98, from a board two years older, as well as new chips from lot 03, which both worked perfectly all the way up to 212F (100C).
Conclusions:
I believe that the people that have tried to use your 1321 have generally had a miserable time of it, unless they already do their own scaling (like some of the Alliance members do.) This is because the shunt feature is not compatible with virtual channels, because NI did not offer a reasonable fix for this problem over a four+ year period, and does NOT advertise this limitation when people are making hardware selections. Further, I believe there are many people that have boards with the same bad lot of chips on them that don�t know it. They may have elected to hardwire their own resistors after fighting with random problems (temperature related). They might have elected to hardwire their own resistors to get around the NI-DAQ limitation. They might not even use the shunt resistor. But one thing is certain: NI needs to clean up this board�s operation, make sure that customers of the serial numbers in my SRQ named above are notified of the bad chips, and fully test that the use of the relays is transparent to LV virtual channels in the future. People will not trust NI products with this type of problems, and will not buy the product again if all the features don�t work!
I have helped NI resolve similar issues with the SCXI-1126 years ago, which had a number of scaling issues in NI-DAQ (the board read great when you used 1k, 2k, 4k, 8k, etc. even ranges, but if you set a virtual channel to 0-2200, the readings were off.) I plotted the problem, documented it with my sales rep, and worked at length with tech support. The boards also had a lot of bad buffer amplifier chips that allowed cross talk between channels, causing a lot of other spurious problems. Those experiences were horribly frustrating, but I now buy the product with confidence. It took a lot of push on my part to convince NI there was a real underlying problem. This 1321 board is similar.
I want NI products to be the best they can be, as I have dedicated my career around them. Please take this feedback to heart, and contact me at 8**-2**-2*** to talk about these issues. Additionally, I am speaking at NI week this year and will be available for discussion. Contact me at the same number.
Sincerely,
Tim Jones
Test Equipment Design Engineer
Space Shuttle Program
Space, Land and Sea Enterprise, Hamilton Sundstrand

Tim
Thank you for your feedback for the SCXI-1321 terminal block.
I wanted to see if it would be possible for you to move your application to NI DAQmx, the new driver for DAQ and SCXI as of NI-DAQ 7.0. I have tested the shunt calibration using a SCXI-1121 and SCXI-1321 and it works as it should. There are two ways to do the shunt calibration with DAQmx.
The first is to use the Calibration feature in the DAQ Assistant. When creating a DAQmx Task in either MAX or LabVIEW, you can select the �Device� tab and click on the Calibration button. It will then ask you if you either want to do a null or shunt calibration, or both. It will then do the calibrations selected and save the values to the task.
The other option to measure the shunted value is to use the AI.B
ridge.ShuntCal.Enable property node in LabVIEW. By setting this property to True, the driver will enable the shunt for the current measurements. If you are taking a strain measurement, the value will be converted to strain.
We are currently looking into the issues you are seeing with the Clare relays to see if other users could be affected.
Brian Lewis
Signal Conditioning PSE
National Instruments

Hi i have an iphone 4 that needs to be updated but my phone is using the cellular company simple mobile via gsm chip and my phone isnt jailbroken will this mess up my phone.

hi i have an iphone 4 that needs to be updated but my phone is using the cellular company simple mobile via gsm chip and my phone isnt jailbroken will this mess up my phone.

If your iPhone is truly unlocked - purchased as unlocked through Apple
or through wireless provider that sells unlocked iPhones or unlocked
by a wireless provider, then the update should not mess up your iPhone.
If your iPhone was jailbroken or hacked to change wireless providers,
then the update will relock it to the original wireless provider if you are lucky
or turn it into a useless brick if unlucky.
Back up first to protect against glitches or other problems.

Backlight Chip and microphone are both unfunctional.. How is it possible the laptop have only 2,5 years old !!

Hello,
I have a problem with my MacBook pro 13,3 inch A1278 I7 2.8 GHz Late 2011.
I bought it at the end of 2011 and the Backlight Chip and Microphone are both unfunctionel (dead)...
This laptop doesn't even have three years old...
How is possible for a computer which cost almost 1500 €...
May I ask you, if it's normal ?
Do I need to change the Logic board, which is going to cost me almost 900€ or Is Apple going to help me out.
Thank you for your attention,
Frenchieee*

Hello,
I have a problem with my MacBook pro 13,3 inch A1278 I7 2.8 GHz Late 2011.
I bought it at the end of 2011 and the Backlight Chip and Microphone are both unfunctionel (dead)...
This laptop doesn't even have three years old...
How is possible for a computer which cost almost 1500 €...
May I ask you, if it's normal ?
Do I need to change the Logic board, which is going to cost me almost 900€ or Is Apple going to help me out.
Thank you for your attention,
Frenchieee*

New Barlclaycard rewards going to be chip and pin?

So now that we know that the rewards card is going to be available with a chip I sent them a message to see when I can get it. This is part of their response: ----------------------------------------------------------------------------------------------------------------------------------------------------Thank you for contacting us regarding your Barclaycard Rewards MasterCard. We can certainly address your concern regarding the new card on your account.
We are pleased to inform that your account is now eligible for the chip-enabled card and will be requested as soon as it becomes available for distribution. Note that this card has a new expiration date with same account number. Be reminded that you should provide the new expiration date to any merchant set up with recurring payments. Once mailed, please allow 7 to 10 business days to be received.
Upon receipt of the card, you may activate it by logging into your account online, contacting us by phone to speak with a representative, or using our automated phone system. Please be advised that activating your card online, you'll be prompted to create a PIN and thus won't need for you to know the assigned PIN to customize it. Activation of your PIN won't take effect until you use your card at a chip-card terminal with a cashier. Your first transaction with a chip-card terminal will activate the new PIN and you'll then be able to use the chip-and-PIN feature at self-service terminals. ---------------------------------------------------------------------------------------------------------------------------------------------------- Does that sound like it's going to be chip and pin instead of chip and signature?

seezar wrote:
So now that we know that the rewards card is going to be available with a chip I sent them a message to see when I can get it. This is part of their response: ----------------------------------------------------------------------------------------------------------------------------------------------------Thank you for contacting us regarding your Barclaycard Rewards MasterCard. We can certainly address your concern regarding the new card on your account.
We are pleased to inform that your account is now eligible for the chip-enabled card and will be requested as soon as it becomes available for distribution. Note that this card has a new expiration date with same account number. Be reminded that you should provide the new expiration date to any merchant set up with recurring payments. Once mailed, please allow 7 to 10 business days to be received.
Upon receipt of the card, you may activate it by logging into your account online, contacting us by phone to speak with a representative, or using our automated phone system. Please be advised that activating your card online, you'll be prompted to create a PIN and thus won't need for you to know the assigned PIN to customize it. Activation of your PIN won't take effect until you use your card at a chip-card terminal with a cashier. Your first transaction with a chip-card terminal will activate the new PIN and you'll then be able to use the chip-and-PIN feature at self-service terminals. ---------------------------------------------------------------------------------------------------------------------------------------------------- Does that sound like it's going to be chip and pin instead of chip and signature? No.That is a pin from every other card. Chip and pin is completely different. The only ones doing it is Dinersclub. I think penfed. and a couple others. All cards have a pin. But it does not make it chip and pin. Its chip and Signature. Then back up will be pin. this is not the same. when you need a pin for every transaction like in europe.Edit so here in US> Even Diners in most cases will use signature. because no many retailers have Pin Terminal. They are still using magnetic strip on the back. But with true chip and pin. you put card in chip reader. and user must use pin. Most cards will default as secondary to chip and pin if no magnetic strip reader available. But as i said. This would still be Chip and Signature. Also Chip and Pin. you don't choose your own pin. The only way is to go to Atm and force it to change the assigned pin.

Kernel module for D30 TPM Chip Linux?

Seems that Linux does not recognize the TPM chip. Could it be that there is no module for it in Linux Kernel? I Thought D30 supports RHEL6?
Manufacturer: LENOVO
Product Name: 422916G
Version: ThinkStation D30
BIOS Revision: 0.37
Solved!
Go to Solution.

Sorry for the noise. Issue is fixed. Needed to install kernel-modules-extras package for tpm_tis kernel module

Nexus5548P and ESxi communication issue

Hi Guys,
I have a Cisco C210M2 server connected to the nexus switch directly. 2 ports are configured for port channeling and vpc.
On the Server I installed ESXi and created a vSwitch and a host with an IP of 192.168.90.210
I have a storage connected to the pair of Nx switch and configured for PC and vPC. On the storage I have configured the IP on the same range
192.168.90.200
I was not able to ping between the IP address. I have checked that the portchannel is up and runing and vPC status shows as up.
Baically not a networkin guy, I googled a lot and came across lldp.
If I did a sh lldp entry , I can see the storge ports there not the server ports.
On the sh lldp dcbx interface eth1/xx I cannot see any peer information , where as on the other ports I can see the peer information.
The server ports are 1G ports and I configured the speed to 1000 on the nexus , where as the storage ports and 10G.
Any help wil be appreciated, I can provide more details if required.
George

George,
Can you verify the VLAN configuration on switch interfaces and ESXi host ?
SSH into ESXi host and provide the output of " esxcfg-vswitch -l "
From N5K switch,
sh run int port-channel ID
Padma

TPM chip and ESXi 5.5

Similar Messages

Maybe you are looking for