Hi all,
I had a question.
Could not find it with a search, so maybe someone can help me out.
Does CommVault support Virtual Trusted Platform Module (vTPM)?
I know Rubrik does not support it yet.
Best Regard
Solved
Does CommVault support Virtual Trusted Platform Module (vTPM)
+1- Novice
Best answer by Damian Andre
Hey
VM encryption in this regard (from docs you linked) is a separate feature than vTPM. VMware encryption launched with vSphere 6.5 I believe. It works to encrypt VM disks and existed before vTPM was available in VMware (6.7). The encryption keys for this feature are managed by an external KMS system wired in to vcenter for this feature and not the trust module of the VM. It’s done in the VMware layer and abstract from the VM itself or guest OS.
+1- Apprentice
Hi All,
I also have the same questions. I have a customer who has VTPM on some of their VMware VMs and we are getting
Error Code
[91:598]
Failure Reason
Unable to download the configuration file for virtual machine [VM]. The remote server returned an error: (500) Internal Server Error.
many thanks,
Rich
Hello
Even though our documentation doesn't specify that we support vTPM, this is infact supported for VMware I believe since March 2023 (might be longer).
It’s supported and nothing special required apart from required permissions and depends on use case like if Hotadd VSA access then it must encrypted.
Check below BOL for details.
https://documentation.commvault.com/2022e/expert/96942_vmware_encryption_for_virtual_machines.html
+1- Apprentice
Hello
I raised a support case a few days after my last posting and they provided the following:
“Currently, Commvault does not support the backup and restore of VMware VMs with vTPM enabled. This limitation arises because the vTPM data, including crucial encryption keys, is not accessible to third-party backup software like Commvault. To proceed with backups, you would need to disable the vTPM feature on the VMs.”
This was as of September 2024 and I have not seen any change to this in recent update release notes.
Thanks.
+20- Community All Star
Sounds like there is a documentation for it but the AI Arlie still thinks it is not supported. Perhaps that should be reviewed by Commvault team.
+11- Vaulter
Sounds like there is a documentation for it but the AI Arlie still thinks it is not supported. Perhaps that should be reviewed by Commvault team.
+27- Vaulter
- Answer
Hey
VM encryption in this regard (from docs you linked) is a separate feature than vTPM. VMware encryption launched with vSphere 6.5 I believe. It works to encrypt VM disks and existed before vTPM was available in VMware (6.7). The encryption keys for this feature are managed by an external KMS system wired in to vcenter for this feature and not the trust module of the VM. It’s done in the VMware layer and abstract from the VM itself or guest OS.
Readiverse Academy Certifications
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.