Stone Equinox / Managing Shielded VM Certificates / Virtual Machine TPM certificates
When you create a virtual machine with TPM in a Hyper-V host, certificates are created on the host for the encryption credentials.
If you move the virtual machine to a different host, the certificates must be available in order to boot or use the VM.
Microsoft recommend that you use the Host Guardian Service to manage these certificates in a Hyper-V Cluster. Alternatively, as a simpler solution, use the CHOPS program on a cluster to identify and copy the required certificates between all hosts.
Note: CHOPs is provided without any warranty, implied or otherwise
CHOPs only needs to be run on one host on the cluster, and should be run whilst logged on as a full administrator.
Applies to:
- Stone Computers Equinox
- Stone Computers Elysium
- Most S2D Hyperconverged Platforms
