Certreq error 0x80090020 NTE_FAIL

Hi,

I am having an issue trying to generate a basic CSR with certreq

OS: Windows 11 22H2 VDI with vTPM on VMWare 7

Issue: We are trying to generate a basic CSR using

Certreq -new <path to Inf> <path to CSR>

however it returns the error: “An internal error occurred. 0x80090020 (-2146893792 NTE_FAIL)”

We are using a basic request policy, I’ve tried a few variations but I don’t think the request file is the issue. We just need to generate the key pair so we have the corresponding private key when the CSR is singed. Policy file:

[Version]
Signature = "$WindowsNT$"
 
[NewRequest]
Subject = "CN=XXXX"
Exportable = TRUE
KeyLength = 2048
MachineKeySet = FALSE

We are seeing errors logged in the Windows “Crypto-NCrypt” log for the user trying to run the certreq command:

Cryptographic Operation failed.
 
Cryptographic Parameters:
      OperationType:     17
      Provider Name:     Microsoft Software Key Storage Provider
      Key Name:         NULL
      Key Type:        
      Algorithm Name:   
 
Failure Information:
      Return Code:       0x80090029
 

And:

Cryptographic Operation failed.
 
Cryptographic Parameters:
      OperationType:     16
      Provider Name:     Microsoft Platform Crypto Provider
      Key Name:         NULL
      Key Type:        
      Algorithm Name:   
 
Failure Information:
      Return Code:       0x80090029
 

I feel like it’s something to do with the vTPM but its not really my area of expertise. Thanks