The behavior points to CPU feature exposure differences between the hosts, not a cluster ownership problem.
Supported facts for this scenario:
- The error itself matches a known Hyper-V live migration issue caused by processor-specific features not supported on the destination host.
- The documented fix is to enable Migrate to a physical computer with a different processor version in the VM processor settings, which maps to
CompatibilityForMigrationEnabled = True. - Hyper-V guidance also recommends starting VMs for the first time on the oldest / least capable CPU host.
- If hosts differ in BIOS settings, firmware, patch level, or speculation-control-related CPU feature exposure, live migration can still fail.
- Microsoft documents that Spectre/Meltdown mitigations and microcode differences can expose different CPU features and block migration.
- Microsoft also documents a Windows Server 2019 issue where speculation control reporting differences can block migration, and states that this specific issue is resolved in Windows Server 2022.
- A vTPM/key protector failure is documented as a separate migration issue category tied to certificate or Shielded VM configuration, not CPU compatibility.
For this environment, the recommended checks are:
- In Hyper-V Manager on the affected VM, verify Virtual Machine Settings > Processor > Processor Compatibility is enabled.
- Verify the host BIOS settings are the same across Node 1, Node 2, and Node 3.
- Verify all nodes are at the same patch and firmware level.
- Run
Get-SpeculationControlSettingson all three nodes and compare the results. The results should be the same on all nodes. - If possible, boot the affected VM on Node 3 first, then test live migration from Node 3 to Nodes 1/2.
- As a workaround for mixed microcode environments, migrate VMs from older to newer microcode rather than from newer to older.
Why Quick Migration can work while Live Migration fails:
- Microsoft documents quick migration as a way to align VM state with the new host when CPU compatibility is involved.
- The accepted Microsoft Q&A explanation is consistent with this: compatibility mode does not retroactively remove CPU features from a VM that is already running. After compatibility is enabled, the VM must be shut down and started so it boots with the masked feature set.
- That also explains why migration may work after a quick migration and restart on Node 3: the VM starts there with the destination-compatible feature set.
Why it can still be inconsistent:
- If BIOS, firmware, microcode, or speculation-control settings differ between nodes, the exposed CPU feature set can still differ enough to block live migration.
- Microsoft specifically calls out post-update failures and advises ensuring all nodes are updated and that speculation settings match.
What can be concluded from the available guidance:
- Mixed CPU generations can work only when the exposed processor feature set is compatible.
- Processor compatibility mode does not guarantee masking of every difference if host configuration, microcode, or mitigation state is inconsistent.
- The vTPM/key protector problem should be treated as a separate issue from the processor compatibility error.
If the issue continues after the checks above, collect data from both source and destination nodes:
- Run the TSS trace on both nodes:
TSS rOn VML:verbose - Reproduce the migration failure.
- Run psSDP on both nodes:
.\GetpsSDP.ps1 HyperV -localNodeOnly - Collect Hyper-V VMMS, Failover Clustering, and related logs from both nodes for escalation.
References: