search

xcp-ng / xcp

Entry point for issues and wiki. Also contains some scripts and sources.
https://xcp-ng.org
1.27k stars 74 forks source link

Support vTPM for guests #471

Open beshleman opened 3 years ago

beshleman commented 3 years ago

Support vTPM allowing TPM-based disk encryption in guests.

Asked about by: https://github.com/xcp-ng/xcp/issues/294#issuecomment-752753791

rjt commented 3 years ago

Now that Windows 11 requires a TPM, would think Win11 VMs need a vTPM. Haven’t tested.

https://www.theverge.com/platform/amp/2021/6/29/22555371/microsoft-windows-11-cpu-support-hardware-requirements-tpm-response

https://blogs.windows.com/windows-insider/2021/06/28/update-on-windows-11-minimum-system-requirements/

beshleman commented 3 years ago

Now that Windows 11 requires a TPM, would think Win11 VMs need a vTPM. Haven’t tested.

https://www.theverge.com/platform/amp/2021/6/29/22555371/microsoft-windows-11-cpu-support-hardware-requirements-tpm-response

https://blogs.windows.com/windows-insider/2021/06/28/update-on-windows-11-minimum-system-requirements/

Definitely true. An additional problem is that Xen only supports virtual TPM 1.2, but Win11 will require TPM 2.0. Luckily, the Xen community has a shared motivation to fix this. For more information on the state of the vtpm in Xen, see this design session held at Xen Summit 2021: https://www.youtube.com/watch?v=abkRRcoYWCQ

We'll eventually be integrating that support too, likely downstream from CH.

pietrushnic commented 3 years ago

There were also some ideas discussed during Qubes OS mini-summit in 2020. Trammel Hudson did quite a lot of work around swtpm - this was discussed on OSFW Slack amd Heads repo. The topic is very interesting and we hope to bring it to Qubes OS mini-summit 2021, which is next Tuesday.

rjt commented 2 years ago

Any progress on vTPM / swTPM?

olivierlambert commented 2 years ago

We'll started to assemble teams from Vates and elsewhere in Q1.

dev4y0u commented 2 years ago

Is there any further progress on this topic. I would appreciate some new details regarding vTPM.

stormi commented 2 years ago

Development is on-going on the XAPI project, an minimal set of features is ready and will probably be available in XCP-ng 8.3 beta within a few weeks.

shanduur commented 1 year ago

What is the current status of this?

olivierlambert commented 1 year ago

A first version is available in XCP-ng. I suggest to follow our blog to keep up to date on the news. https://xcp-ng.org/blog/2023/02/27/news-about-8-3-alpha/