Question about ESXi 8 and vTPM for Citrix MCS. We're testing W11 on ESXi 8 right now with vTPMs, and it looks like our provisioned VDAs all have unique thumbprints for the vTPM. Does anyone know if Citrix natively Replaces the vTPM of the master VM instead of Cloning it? There's no option in the MCS wizard for this, and we don't have the setting mentioned in this article configured: https://support.citrix.com/s/article/CTX665864-new-machines-with-vtpm-have-the-same-thumbprint-in-vsphere?language=en_US. So I'm curious as to how this is actually working. We are also not using a machine template in our catalog.

The tpm should be coming from a hypervisor template unless its azure and then it from the machine profile

So we're not using a machine template for this catalog, straight up just selecting the master VM.

then it shouldnt be working at all

So we should cloning the master VM to a template, and setting the item listed in that article as a best practice?

Yiou know what im wrong i mgetting confused wiht app layering

Thank you!

I heard back from engineering. Currently the way it works is that if you enable the tpm and use a machine profile the tpm will be cloned if you have it in your master image only and don't use a machine profile then each one is created uniquely.

Nice, that explains what we're seeing then. Definitely don't want to clone the TPM, so we'll keep doing this. Appreciate it, Rob!

Well if you are for instance using bitlocker i think you may want it to be cloned so the keys stay the same.

We don't use Bitlocker, but that's good to know