I have a backup of the keychains, and the Library folders. So if it was stored anywhere in either, I can retrieve it, and it must be possible somehow. However nothing looks promising. And copying over the Application Support folder was not sufficient.
I believe it was a lazily allocated disk (I see Virtual Disk-s001.vmdk, etc. files). The VM has no snapshots. But there was some data encrypted with the TPM I need back.
However for now, what's a step-by-step procedure for removing the vTPM? I tried removing the VMX lines mentioned in your post, but of course the VM becomes unbootable.