TPM Validation fails on one node, TPM Enabled true, TPM Ready false

Question

TPM Validation fails on one node, TPM Enabled true, TPM Ready false

Andy Tost 70

Hi Support,

we want to add a second node to our cluster, but we are getting errors due to vaidation TPM Readiness. TPM Ready = false, but TPM Enabled = true, is there any command we can run to set tpm Ready to true. the first node has the same Firmware an Manufacture TPM Chip and it shows Ready = true.

TpmPresent : True

TpmReady : False

TpmEnabled : True

TpmActivated : True

TpmOwned : True

RestartPending : False

ManufacturerId : 1398033696

PpiVersion : 1.3

ManufacturerIdTxt : STM

ManufacturerVersion : 73.20.17568.6684

ManufacturerVersionFull20 : 73.20.17568.6684

ManagedAuthLevel : Full

OwnerAuth :

OwnerClearDisabled : False

AutoProvisioning : Enabled

LockedOut : False

LockoutHealTime : 2 hours

LockoutCount : 0

LockoutMax : 32

SelfTest : {}

Andy Tost 70

Error Details:

FullStepIndex: 1.3

RolePath: Cloud\Infrastructure\EnvironmentValidator

Interface: ValidateScaleOutHardware

StackTrace:

CloudEngine.Actions.InterfaceInvocationFailedException: Type 'ValidateScaleOutHardware' of Role 'EnvironmentValidator' raised an exception:

{

"ExceptionType":  "json",

"ErrorMessage":  {

                     "Message":  "Hardware requirements not met. Review output and remediate.",

                     "Results":  {

                                     "Name":  "AzStackHci_Hardware_Test_Tpm_TpmReady_Property",

                                     "DisplayName":  "Test TPM Property TpmReady is True ECLVM05",

                                     "Tags":  {

                                              },

                                     "Title":  "Test TPM Property TpmReady is True",

                                     "Status":  1,

                                     "Severity":  2,

                                     "Description":  "Checking TPM for desired properties",

                                     "Remediation":  "https://aka.ms/hci-envch",

                                     "TargetResourceID":  "Machine: ECLVM05, Class: Tpm, Manufacturer ID: 1398033696",

                                     "TargetResourceName":  "Machine: ECLVM05, Class: Tpm, Manufacturer ID: 1398033696",

                                     "TargetResourceType":  "Tpm",

                                     "Timestamp":  "\/Date(1759746372855)\/",

                                     "AdditionalData":  {

                                                            "Detail":  "Property \u0027TpmReady\u0027 value \u0027False\u0027 but expected \u0027True\u0027",

                                                            "Status":  "FAILURE",

                                                            "TimeStamp":  "10/06/2025 10:26:12",

                                                            "Resource":  "False",

                                                            "Source":  "TpmReady"

                                                        },

                                     "HealthCheckSource":  "AddNode\\Standard\\Medium\\Hardware\\8d548b45"

                                 }

                 },

Andy Tost 70 Reputation points

2025-10-06T10:40:43.2566667+00:00

get-tpm from both nodes.pnghere is the output from get-tpm from both nodes
Andy Tost 70 Reputation points

2025-10-06T11:17:19.2833333+00:00

Hi Ankit Yadavdav,

great solution, i didnt know this command before

thank you

regards

Andy
Anonymous

2025-10-07T13:37:49.8966667+00:00

Hello @Andy Tost ,

If your query has been answered, please take a moment to accept answers .

Thank you for helping to improve Microsoft Q&A!

Answer recommended by moderator

Anonymous

Hello @Andy Tost

Have you tried to initialize-Tpm on the new node?

If not, can you please connect to the new node and try below powershell command to Initialize-Tpm

Initialize-Tpm -AllowClear -AllowPhysicalPresence

Reference: https://learn.microsoft.com/en-us/powershell/module/trustedplatformmodule/initialize-tpm?view=windowsserver2025-ps#example-1-initialize-a-tpm

If it doesn't, can you try restarting the node

Restart-Computer

and then try below command to see if there's any operation is pending:

Get-Tpm | Select-Object *pending*

Let me know if this fails to fix the issue.

Anonymous

2025-10-06T11:34:40.8866667+00:00

Hello @Andy Tost

Just wanted to check in if the solution worked for you.

If you ran into any issues or have questions about it, feel free to reach out—I'd be happy to help!

1 additional answer

Your answer

Andy Tost 70 Reputation points

2025-10-06T10:36:44.26+00:00

Error Details:

FullStepIndex: 1.3

RolePath: Cloud\Infrastructure\EnvironmentValidator

Interface: ValidateScaleOutHardware

StackTrace:

CloudEngine.Actions.InterfaceInvocationFailedException: Type 'ValidateScaleOutHardware' of Role 'EnvironmentValidator' raised an exception:

{

"ExceptionType": "json", "ErrorMessage": { "Message": "Hardware requirements not met. Review output and remediate.", "Results": { "Name": "AzStackHci_Hardware_Test_Tpm_TpmReady_Property", "DisplayName": "Test TPM Property TpmReady is True ECLVM05", "Tags": { }, "Title": "Test TPM Property TpmReady is True", "Status": 1, "Severity": 2, "Description": "Checking TPM for desired properties", "Remediation": "https://aka.ms/hci-envch", "TargetResourceID": "Machine: ECLVM05, Class: Tpm, Manufacturer ID: 1398033696", "TargetResourceName": "Machine: ECLVM05, Class: Tpm, Manufacturer ID: 1398033696", "TargetResourceType": "Tpm", "Timestamp": "\/Date(1759746372855)\/", "AdditionalData": { "Detail": "Property \u0027TpmReady\u0027 value \u0027False\u0027 but expected \u0027True\u0027", "Status": "FAILURE", "TimeStamp": "10/06/2025 10:26:12", "Resource": "False", "Source": "TpmReady" }, "HealthCheckSource": "AddNode\\Standard\\Medium\\Hardware\\8d548b45" } },
Andy Tost 70 Reputation points

2025-10-06T10:40:43.2566667+00:00

get-tpm from both nodes.pnghere is the output from get-tpm from both nodes
Andy Tost 70 Reputation points

2025-10-06T11:17:19.2833333+00:00

Hi Ankit Yadavdav,

great solution, i didnt know this command before

thank you

regards

Andy
Anonymous

2025-10-07T13:37:49.8966667+00:00

Hello @Andy Tost ,

If your query has been answered, please take a moment to accept answers .

Thank you for helping to improve Microsoft Q&A!
Anonymous

2025-10-06T11:34:40.8866667+00:00

Hello @Andy Tost

Just wanted to check in if the solution worked for you.

If you ran into any issues or have questions about it, feel free to reach out—I'd be happy to help!

Answer 1

Francisco Javier Perez Pozuelo 20

Hello! I currently have TpmOwned set to false. How can I set it to true? Windows 11 23h2.

The Event Viewer shows this error: "Secure Boot Update could not update a Secure Boot variable and returned the error 'Secure Boot is not enabled on this machine.' For more information, see https://go.microsoft.com/fwlink/?linkid=2169931" ID: 1796

0 comments