Does CommVault support Virtual Trusted Platform Module (vTPM)

What hypervisor support are you interested in? AHV by any chance?

HI Jacek, 

Sorry it's for/in VMware. 

Hi All,

I also have the same questions. I have a customer who has VTPM on some of their VMware VMs and we are getting 

Error Code

[91:598]

Failure Reason

Unable to download the configuration file for virtual machine [VM]. The remote server returned an error: (500) Internal Server Error.

many thanks,

Rich

Hello ​@Richard Kent & ​@sakuragi, 

Even though our documentation doesn't specify that we support vTPM, this is infact supported for VMware I believe since March 2023 (might be longer). 

It’s supported and nothing special required apart from required permissions and depends on use case like if Hotadd VSA access then it must encrypted.

Check below BOL for details.

https://documentation.commvault.com/2022e/expert/96942_vmware_encryption_for_virtual_machines.html

Hello ​@hewhomustnotbenamed,

I raised a support case a few days after my last posting and they provided the following:

“Currently, Commvault does not support the backup and restore of VMware VMs with vTPM enabled. This limitation arises because the vTPM data, including crucial encryption keys, is not accessible to third-party backup software like Commvault. To proceed with backups, you would need to disable the vTPM feature on the VMs.”

This was as of September 2024 and I have not seen any change to this in recent update release notes.

Thanks.

@Sougato Roy Tagging you for awareness 

https://documentation.commvault.com/11.46/commcell-console/vmware_encryption_for_virtual_machines.html

Sounds like there is a documentation for it but the AI Arlie still thinks it is not supported. Perhaps that should be reviewed by Commvault team. 

@Sougato Roy Tagging you for awareness 

 

https://documentation.commvault.com/11.46/commcell-console/vmware_encryption_for_virtual_machines.html

Sounds like there is a documentation for it but the AI Arlie still thinks it is not supported. Perhaps that should be reviewed by Commvault team. 

 

 

​@dude Hi! Thank you for flagging this. I'm looking into it and will share an update as soon as I have more information.

Hey ​@dude 

VM encryption in this regard (from docs you linked) is a separate feature than vTPM. VMware encryption launched with vSphere 6.5 I believe. It works to encrypt VM disks and existed before vTPM was available in VMware (6.7). The encryption keys for this feature are managed by an external KMS system wired in to vcenter for this feature and not the trust module of the VM. It’s done in the VMware layer and abstract from the VM itself or guest OS.