Skip to content

Commit

Permalink
Add TPM docs
Browse files Browse the repository at this point in the history
Signed-off-by: futuretea <Hang.Yu@suse.com>
  • Loading branch information
futuretea committed May 9, 2023
1 parent 31744b5 commit eda206c
Show file tree
Hide file tree
Showing 2 changed files with 16 additions and 0 deletions.
15 changes: 15 additions & 0 deletions docs/vm/create-vm.md
Original file line number Diff line number Diff line change
Expand Up @@ -157,6 +157,21 @@ If your OS is openSUSE and the version is less than 15.3, please replace `qemu-g

:::

### TPM Device

_Available as of v1.2.0_

The [Trusted Platform Module (TPM)](https://en.wikipedia.org/wiki/Trusted_Platform_Module) is a cryptoprocessor that secures hardware using cryptographic keys.

Referring to [Windows 11 Requirements](https://learn.microsoft.com/en-us/windows/whats-new/windows-11-requirements), the TPM device is a hard requirement of Windows 11.

In the Harvester UI, you can add an emulated TPM to the VM by selecting the `Enable TPM` option in the **Advanced Options** tab.

:::note

Currently, only non-persistent vTPM is supported, and its state is erased after each VM shutdown. Therefore, [Bitlocker](https://learn.microsoft.com/en-us/windows/security/information-protection/bitlocker/bitlocker-overview) should not be enabled.

:::

## One-time Boot For ISO Installation

Expand Down
1 change: 1 addition & 0 deletions docs/vm/create-windows-vm.md
Original file line number Diff line number Diff line change
Expand Up @@ -103,6 +103,7 @@ Changing the `Node Scheduling` settings can impact Harvester features, such as d
2. `Machine Type`: The value `None` is set by default. It's recommended you don't change it. See the [KubeVirt Machine Type](https://kubevirt.io/user-guide/virtual_machines/virtual_hardware/#machine-type) documentation before you change this value.
3. (Optional) `Hostname`: Set the VM hostname.
4. (Optional) `Cloud Config`: Both `User Data` and `Network Data` values are set with default values. Currently, these configurations are not applied to Windows-based VMs.
5. (Optional) `Enable TPM`, `Booting in EFI mode`, `Secure Boot`: Notablel, both the TPM device and UEFI firmware with SecureBoot are hard requirements for Windows 11.

![create-windows-vm-advanced](/img/v1.2/vm/create-windows-vm-advanced.png)

Expand Down

0 comments on commit eda206c

Please sign in to comment.