VMware Hypervisor Console Access Failure for Windows 11 VM with TPM in Morpheus

[asingh1]

A Windows 11 virtual machine was created in vCenter using the official ISO image, with the TPM (Trusted Platform Module) enabled, as required for Windows 11 installations. The VM was successfully deployed and discovered within Morpheus.

However, when attempting to access the hypervisor console from Morpheus, the operation consistently failed.
Upon removing the TPM module from the VM in vCenter, console access through Morpheus started functioning correctly, indicating a permissions-related issue.

Root Cause:
The failure occurred due to missing cryptographic privileges in the custom MorpheusRole configured in vCenter.

Resolution:
To resolve the issue, the following privileges were granted to the MorpheusRole in vCenter:

Navigation Path:

Administration → Access Control → Roles → MorpheusRole → Privileges

Added Privileges (under “Cryptographic Operations”):

1. Clone
2. Direct
3. AccessMigrate
   
   
   

These permissions are mandatory when managing VMs that utilize TPM. Without them, Morpheus cannot establish hypervisor console sessions on encrypted Windows virtual machines.