VMware Cloud Community
cvil86
Contributor
Contributor

Slow performance when adding protectors on VMs that have a snapshot and TPM

Hi,
I was recently testing some scenarios on my VMs which involved encryption.
For this, i have configured a NKP on my vcenter environment and added TPM to the test VMs. The setup works as expected baring one specific case.
One of the test scenarios that i was interested in included adding protectors using the manage-bde utility, something like: manage-bde -protectors -add C: -tpm
While testing this scenario i noticed that the execution time for adding protectors was pretty large with over 20 minutes recorded or sometimes the command not even completing at all.
I managed to narrow this down to what looks like an issue with VMs with snapshots, more specifically, this behavior occurs only on VMs that have a snapshot created.
On VMs that have no snapshot, the command is completed instantly. The tests were done on Windows 10 (starting with build 1909), Windows 11 and Windows server starting with 2012R2.

Has anyone encountered this scenario or am i missing something ? Are there some known limitations when working with vTPM and snapshots?
Any input in further troubleshooting this would be greatly appreciated.

Many thanks.

0 Kudos
0 Replies