Skip to content

Commit

Permalink
Add vTPM to VMware
Browse files Browse the repository at this point in the history
  • Loading branch information
Lennonka committed Jan 22, 2025
1 parent 28be3bc commit efe6933
Show file tree
Hide file tree
Showing 2 changed files with 9 additions and 6 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -12,8 +12,7 @@ To use the CLI instead of the {ProjectWebUI}, see the xref:cli-Adding_VMware_Det
. In the *CPUs* field, enter the number of CPUs to allocate to the host.
. In the *Cores per socket* field, enter the number of cores to allocate to each CPU.
. In the *Memory* field, enter the amount of memory in MiB to allocate to the host.
. In the *Firmware* checkbox, select either _BIOS_ or _UEFI_ as firmware for the host.
By default, this is set to _automatic_.
. In the *Firmware* field, select the firmware type for the host.
. In the *Cluster* list, select the name of the target host cluster on the VMware environment.
. From the *Resource pool* list, select an available resource allocations for the host.
. In the *Folder* list, select the folder to organize the host.
Expand All @@ -28,6 +27,7 @@ By default, this is set to _automatic_.
. From the *SCSI controller* list, select the disk access method for the host.
. If you want to use eager zero thick provisioning, select the *Eager zero* checkbox.
By default, the disk uses lazy zero thick provisioning.
. Select *Virtual TPM* if you want to add a Virtual Trusted Platform Module for enhanced security.
. From the *Network Interfaces* list, select the network parameters for the host's network interface.
At least one interface must point to a {SmartProxy}-managed network.
. Optional: Click *Add Interface* to create another network interfaces.
Expand All @@ -46,7 +46,7 @@ $ hammer compute-profile create --name "_My_Compute_Profile_"
[options="nowrap" subs="+quotes"]
----
$ hammer compute-profile values create \
--compute-attributes "cpus=1,corespersocket=2,memory_mb=1024,cluster=MyCluster,path=MyVMs,start=true" \
--compute-attributes "cpus=1,corespersocket=2,memory_mb=1024,firmware=uefi_secure_boot,cluster=MyCluster,path=MyVMs,virtual_tpm=true,start=true" \
--compute-profile "_My_Compute_Profile_" \
--compute-resource "_My_VMware_" \
--interface "compute_type=VirtualE1000,compute_network=mynetwork \
Expand Down
9 changes: 6 additions & 3 deletions guides/common/modules/proc_creating-a-vmware-user.adoc
Original file line number Diff line number Diff line change
Expand Up @@ -3,9 +3,7 @@

The VMware vSphere server requires an administration-like user for {ProjectServer} communication.
For security reasons, do not use the `administrator` user for such communication.
Instead, create a user with the following permissions:

For VMware vCenter Server version 8.0 or 7.0, set the following permissions:
Instead, create a user with the following privileges:

* All Privileges -> Datastore -> Allocate Space, Browse datastore, Update Virtual Machine files, Low level file operations
* All Privileges -> Network -> Assign Network
Expand All @@ -15,3 +13,8 @@ For VMware vCenter Server version 8.0 or 7.0, set the following permissions:
* All Privileges -> Virtual Machine -> Edit Inventory (All)
* All Privileges -> Virtual Machine -> Provisioning (All)
* All Privileges -> Virtual Machine -> Guest Operations (All)

Additionally, if you want to create virtual machines with a Virtual Trusted Platform Module (TPM) for enhanced security, set the following privileges:

* All Privileges -> Cryptographic operations -> Clone, Encrypt, Encrypt new, Migrate, Register VM
* All Privileges -> Cryptographic operations -> Direct Access {endash} required to open a console session

0 comments on commit efe6933

Please sign in to comment.