12.0

Configuring a Trusted Platform Module Device
You can add a virtual cryptoprocessor that uses Trusted Platform Module (TPM) technology to
an encrypted virtual machine. Afterward, you can remove the cryptoprocessor from the virtual
machine.
TPM technology provides hardware-based, security-related functions. A TPM cryptoprocessor
carries out cryptographic operations. Fusion supports TPM version 2.0.
Create a Virtual Trusted Platform Module Device
For increased security, you can add a virtual cryptoprocessor that is equipped with Trusted
Platform Module (TPM) technology to an encrypted virtual machine.
Prerequisites
n Create a virtual machine with a minimum hardware version of 14 that uses the UEFI firmware
type.
n Encrypt the virtual machine. See Encrypt a Virtual Machine.
Procedure
1 Select Window > Virtual Machine Library.
2 Select a virtual machine in the Virtual Machine Library window and click Settings.
3 Click Add Device.
4 Click Trusted Platform Module.
If the option is not available, the Trusted Platform Module device is not supported on the
guest.
5 Click Add.
A dialog box appears.
6 Close the dialog box.
Results
The virtual machine uses the virtual TPM device.
Note You cannot decrypt the virtual machine when the TPM device is present.
Remove a Virtual Trusted Platform Module Device
You can remove a Trusted Platform Module device from a virtual machine.
After you add a virtual cryptoprocessor equipped with Trusted Platform Module (TPM)
technology to an encrypted virtual machine, you can then remove the TPM device.
Procedure
1 Select Window > Virtual Machine Library.
Using VMware Fusion
VMware, Inc. 164