Hi,
I could not get it to work on an already installed windows VM - I am not
sure this is a FreeBSD/swtpm issue.
On a fresh install I have had no issue.
my config:
bhyve_options="-l tpm,swtpm,/tmp/.bhyve.tpm.win11.sock"
prestart="tpm.sh"
and with tpm.sh:
#!/bin/sh
SOCKET="/tmp/.bhyve.tpm.win11.sock"
if [ ! -S "$SOCKET" ]; then
nohup swtpm socket --tpmstate
backend-uri=file:///evo/vms/win11/tpm.state --server
type=unixio,path="$SOCKET" --tpm2 --flags not-need-init &
fi
hth,
Robert
On 27.11.25 15:30, Andrea Venturoli wrote:
Hello.
I'm hitting my head on this, but cannot make it work.
Is it expected to work or am I just wasting my time?
FreeBSD 14.3/amd64
edk2-bhyve-g202308_5
vm-bhyve-1.6.2_1
bye & Thanks
av.
P.S.
In case someone is interested in the details:
vmbhyve starts bhyve with:
bhyve options: -c 3,sockets=1,cores=3,threads=1 -m 4G -AHPw -l
bootrom,/usr/local/share/uefi-firmware/BHYVE_UEFI.fd -l tpm,swtpm,/
var/run/swtpm/tpm -k /zroot/vm/eserver/bhyve.conf -U f753439f-
bffa-11e8-b279-a4bf0142162f]
bhyve devices: -s 0,hostbridge -s 31,lpc -s 4:0,virtio-blk,/dev/zvol/
zroot/vm/eserver/disk0,sectorsize=512 -s 5:0,virtio-
net,tap0,mac=58:9c:fc:00:11:65
-s 6:0,fbuf,tcp=192.168.XXX.1:25900 -s 7:0,xhci,tablet]
Windows sees the TPM device but says it cannot be started (code 10) due
to a protocol error.
In bhyve.log I see:
/tmp/bhyve.z4HOkg5 873: OperationRegion(TPP1, SystemMemory,
Add(0xfed45000, Arg0), One)
Remark 2173 - ^ Creation of
named objects within a method is highly inefficient, use globals or
method local variables instead (\_S
B.TPM.TPFN)
/tmp/bhyve.z4HOkg5 895: Method(_DSM, 4, Serialized)
Warning 3115 - ^ Not all control paths
return a value (\_SB.TPM._DSM)
/tmp/bhyve.z4HOkg5 895: Method(_DSM, 4, Serialized)
Warning 3107 - ^ Reserved method must
return a value (Integer/String/Buffer/Package/Reference required for
_DSM)
/tmp/bhyve.z4HOkg5 985: If(LEqual(Arg0, ToUUID("376054ED-
CC13-4675-901C-4756D7F2D45D"))) /* UUID */
Remark 2184 -
Unknown
UUID string ^
bhyve: tpm_swtpm_execute_cmd: rsp read failed (bytes read: 4 / 3968):
No error: 0
bhyve: tpm_crb_mem_handler: cancelling a TPM command is not
implemented yet
bhyve: tpm_swtpm_execute_cmd: rsp read failed (bytes read: 4 / 3968):
No error: 0
bhyve: tpm_crb_mem_handler: cancelling a TPM command is not
implemented yet
bhyve: tpm_swtpm_execute_cmd: rsp read failed (bytes read: 4 / 3968):
No error: 0
In swtpm logs:
Ctrl Cmd: length 12
80 01 00 00 00 0C 00 00 01 44 00 00 Error: Unknown command: 0x80010000
Ctrl Rsp: length 4
00 00 00 0A Ctrl Cmd: length 22
80 01 00 00 00 16 00 00 01 7A 00 00 00 06 00 00 01 00 00 00 00 2A
Error: Unknown command: 0x80010000
Ctrl Rsp: length 4
00 00 00 0A Ctrl Cmd: length 22
80 01 00 00 00 16 00 00 01 7A 00 00 00 06 00 00 01 00 00 00 00 2A
Error: Unknown command: 0x80010000
Ctrl Rsp: length 4
00 00 00 0A
This looks possibly like:
https://github.com/stefanberger/swtpm/issues/1069
That's for a different platform however and I have no idea how to "port"
those info to bhyve.
I have no previous experiences with swtpm (and I find it hard to get a
good howto/tutorial); TPM passthrough works for me (but obviously not on
machines without TPM).
