TPM for KVM please?

[NLS]

TPM is required in more and more things nowadays, including installing Windows 11 on a VM.

Seems that KVM on unRAID can be done to support a virtual KVM, according to this guide:

https://www.linkedin.com/pulse/swtpm-unraid-zoltan-repasi/

Can this be implemented natively on unRAID maybe for 6.10?

 

 

[unrateable]

+1 yes please (being on Broadwell ... can I spoof required CPU as well 🤔?)

Edited September 20, 2021 by unrateable

[ab5g]

+1 please 

[Neuubda]

+1 please

Announcing Windows 11 Insider Preview Build 22000.194
https://blogs.windows.com/windows-insider/2021/09/16/announcing-windows-11-insider-preview-build-22000-194/
 

Quote

This build includes a change that aligns the enforcement of the Windows 11 system requirements on Virtual Machines (VMs) to be the same as it is for physical PCs. ..... Running Windows 11 in VMs in other virtualization products from vendors such as VMware and Oracle will continue to work as long as the hardware requirements are met.

Quote

4GB of memory, 64GB of storage, UEFI secure boot, graphics requirements and TPM 2.0 are the right minimum system requirements

 

Edited September 23, 2021 by Neuubda

[ich777]

Currently working on a TPM emulator plugin for unRAID.

[unraid888]

3 hours ago, ich777 said:

Currently working on a TPM emulator plugin for unRAID.

Hello mate, how is your emulator coming along? Very interested to hear about this.

[ich777]

16 minutes ago, BeardedNoir said:

Hello mate, how is your emulator coming along?

Only creating a plugin...

 

The swtpm is running but it shows Code 10 within Windows 11.

 

Have to look into this when I got more time, my time is really limited right now.

[ich777]

Only for your information a little more work is needed but it is in the works since OVMF also needs secure boot enabled and a few other things.

 

[ich777]

A little bit more progress...

 

[JustOverride]

Great job! Hope it gets baked into UNRAID.

[agh1701]

I hope we get a solution that does not require custom xml.

[ich777]

13 hours ago, agh1701 said:

I hope we get a solution that does not require custom xml.

It is in the works.

 

As you can see from my screenshot from above (2 posts above yours) it is indeed working and the only change I've made is to the xml in terms of the TPM module and the BIOS (pretty minor changes) but that can be integrated into unRAID.

[agh1701]

Thanks!

[ich777]

Update...

Fresh install from the latest Windows 11 Insider Preview also works just fine (please ignore that it says not compatible because I've only assigned 50GB to the vdisk instead of the required 64GB *doh*) :

[NLS]

Nice.
So will you post something for us soon?

[ich777]

3 hours ago, NLS said:

So will you post something for us soon?

No, I don't think so because it has to be done mostly manually like it is now, please wait a little longer and I think it will be integrated natively into unRAID.

[NLS]

6 hours ago, ich777 said:

No, I don't think so because it has to be done mostly manually like it is now, please wait a little longer and I think it will be integrated natively into unRAID.

I already have a VM Win11 that cannot update further because of this.
(also cannot go back to 10 because I deleted the files)
I really hope they add it soon.

Else maybe help us do it with some guide... pls.

 

[ich777]

7 hours ago, NLS said:

Else maybe help us do it with some guide... pls.

I'm willing to do so but wait a little longer, otherwise this could become quickly a pretty big mess in terms of configuration.

[Ninnetyer]

Oh yeah +1 on this, altough not sure if xeon E5 v4 cpus will get some love from microsoft for win11.

[ich777]

Another update (I know there is much on the screen but I wanted to show that Bitlocker is working, TPM is working and Secure Boot is available):

[Ninnetyer]

2 minutes ago, ich777 said:

Another update (I know there is much on the screen but I wanted to show that Bitlocker is working, TPM is working and Secure Boot is available):

 

 

Hey, thank you for the hard work you are putting into this feature, do you think people with no supported cpus will still be able to boot win11 with this tpm emulation?

[ich777]

5 minutes ago, Ninnetyer said:

Hey, thank you for the hard work you are putting into this feature, do you think people with no supported cpus will still be able to boot win11 with this tpm emulation?

I think so, since if you install the latest build from Windows 11 the installer even doesn't complain anymore about a incompatible CPU (6700k).

[Ninnetyer]

3 minutes ago, ich777 said:

I think so, since if you install the latest build from Windows 11 the installer even doesn't complain anymore about a incompatible CPU (6700k).

 

Thats good news, hopefully microsoft won't mess up compatibility on launch date.

 

Will keep an eye on this thread, so I can try out the plugin when its ready.

 

Thank you again.

[NLS]

Yeap... waiting for any news, as my Win11 VM stopped updating and I have deleted the return to 10 option...

 

[alturismo]

17 hours ago, NLS said:

Yeap... waiting for any news, as my Win11 VM stopped updating and I have deleted the return to 10 option...

 

 

no big deal, with the next unraid update it ll work again (also on the insiders dev channel users here )

and also easy and nice to handle with existing VM's, like @ich777 already pointed out, give it a few days ... windows wont stop working now