How to fix “Host TPM Attestation Alarm” in VMware?

[AngelineCr]

I’m getting a Host TPM Attestation Alarm in VMware and need help resolving it. Has anyone successfully fixed this issue?

 

[robbinhook]

To fix the “Host TPM Attestation Alarm” in VMware, verify the host’s TPM is enabled in BIOS and functioning correctly. Ensure the host’s time is synchronized and vCenter can read TPM measurements. Clear old TPM entries, reboot the host if needed, and reattest it through vCenter > Monitor > Security.

 

[AlexVale]

The host TPM attestation alarm usually means the TPM device isn’t passing health checks. First, check if TPM is enabled in the BIOS/UEFI and that your firmware supports attestation.

 

[AnnisHayma]

I resolved it by updating the server’s firmware and TPM drivers — outdated firmware often causes attestation failures in ESXi hosts.

 

[Lorrie]

Make sure the TPM mode in BIOS matches what VMware expects (e.g., discrete vs. firmware TPM). Mismatches can trigger the alarm.

 

[Olive]

In ESXi, you can try clearing the TPM (if safe to do so) and letting it reinitialize — this often clears stale or corrupted attestation data.

 

[BenitoEnelo]

Also verify that vCenter’s host profile settings for TPM/attestation align with the host’s actual configuration; inconsistencies can spark alarms

 

[Lugwig]

If it persists, check logs (/var/log/vmkernel.log) for specific TPM errors and consider disabling attestation temporarily while you troubleshoot deeper.