Skip to content

Trusted Launch for VM/VMSS #27260

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 11 commits into from
Mar 24, 2025
Merged

Trusted Launch for VM/VMSS #27260

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
11 commits
Select commit Hold shift + click to select a range
011ea63
update to pass standard
grizzlytheodore Mar 3, 2025
8b588fd
update test
grizzlytheodore Mar 3, 2025
f3f54c4
test updated
grizzlytheodore Mar 4, 2025
0d84fdf
add information
grizzlytheodore Mar 4, 2025
714a144
add test
grizzlytheodore Mar 7, 2025
1296a33
Merge branch 'main' into feature/cplat-TLBugMarch2025
grizzlytheodore Mar 7, 2025
fb3c4b5
tests and bug fix
grizzlytheodore Mar 12, 2025
647ea79
Merge branch 'feature/cplat-TLBugMarch2025' of https://github.com/Azu…
grizzlytheodore Mar 12, 2025
3ffae97
updated test
grizzlytheodore Mar 13, 2025
2adce73
updated tests
grizzlytheodore Mar 13, 2025
c77c5a9
update tests
grizzlytheodore Mar 14, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
34 changes: 23 additions & 11 deletions src/Compute/Compute.Test/ScenarioTests/VirtualMachineScaleSetTests.ps1
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3831,6 +3831,7 @@ function Test-VirtualMachineScaleSetConfidentialVMSSSecurityType
Assert-NotNull $vmssvms;
$vmssvm = Get-AzVmssvm -ResourceGroupName $rgname -VMScaleSetName $vmssName -InstanceId $vmssvms[0].InstanceId;
Assert-AreEqual $securityEncryptionType $vmssvm.StorageProfile.OsDIsk.ManagedDisk.SecurityProfile.SecurityEncryptionType;

}
finally
{
Expand Down Expand Up @@ -4466,7 +4467,7 @@ function Test-VirtualMachineScaleSetSecurityType
{
# Setup
$rgname = Get-ComputeTestResourceName;
$loc = Get-ComputeVMLocation;
$loc = "eastus2euap";

try
{
Expand Down Expand Up @@ -4534,6 +4535,17 @@ function Test-VirtualMachineScaleSetSecurityType
Assert-AreEqual $vmssGet.VirtualMachineProfile.SecurityProfile.UefiSettings.SecureBootEnabled $true;
# Vmss Identity is now in fact only UserAssigned as expected.


# Update SecurityType to Standard.
Stop-Azvmss -ResourceGroupName $rgname -Name $vmssName2 -Force
Update-AzVmss -ResourceGroupName $rgname -Name $vmssName2 -SecurityType "Standard"
Start-AzVmss -ResourceGroupName $rgname -Name $vmssName2
$updated_vmss = Get-AzVmss -ResourceGroupName $rgname -Name $vmssName2;

Assert-Null $updated_vmss.VirtualMAchineProfile.SecurityProfile.SecurityType;
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

nitpick, A shouldnt be capitalized.

Assert-Null $updated_vmss.VirtualMAchineProfile.SecurityProfile.UefiSettings;
Assert-Null $updated_vmss.VirtualMAchineProfile.SecurityProfile.SecurityType;

# Guest Attestation extension defaulting test
# Removed this portion as this logic was removed as per feature team request.
<#
Expand Down Expand Up @@ -4570,7 +4582,7 @@ function Test-VirtualMachineScaleSetSecurityTypeWithoutConfig
{
# Setup
$rgname = Get-ComputeTestResourceName;
$loc = Get-ComputeVMLocation;
$loc = "westus2";

try
{
Expand Down Expand Up @@ -4648,7 +4660,7 @@ function Test-VirtualMachineScaleSetSecurityTypeStandard
{
# Setup
$rgname = Get-ComputeTestResourceName;
$loc = Get-ComputeVMLocation;
$loc = "westus2";

try
{
Expand Down Expand Up @@ -4690,7 +4702,7 @@ function Test-VirtualMachineScaleSetSecurityTypeStandardWithConfig
{
# Setup
$rgname = Get-ComputeTestResourceName;
$loc = Get-ComputeVMLocation;
$loc = "westus2";

try
{
Expand Down Expand Up @@ -4831,7 +4843,7 @@ function Test-VirtualMachineScaleSetSecurityTypeWithoutConfigUpdate
{
# Setup
$rgname = Get-ComputeTestResourceName;
$loc = Get-ComputeVMLocation;
$loc = "westus2";

try
{
Expand Down Expand Up @@ -4886,7 +4898,7 @@ function Test-VirtualMachineScaleSetSecurityTypeUpdate
{
# Setup
$rgname = Get-ComputeTestResourceName;
$loc = Get-ComputeVMLocation;
$loc = "westus2";

try
{
Expand Down Expand Up @@ -4967,7 +4979,7 @@ function Test-VirtualMachineScaleSetSecurityTypeDefaulting
{
# Setup
$rgname = Get-ComputeTestResourceName;
$loc = Get-ComputeVMLocation;
$loc = "westus2";

try
{
Expand Down Expand Up @@ -5046,7 +5058,7 @@ function Test-VirtualMachineScaleSetSecurityTypeDefaultingFromImage
{
# Setup
$rgname = Get-ComputeTestResourceName;
$loc = Get-ComputeVMLocation;
$loc = "westus2";

try
{
Expand Down Expand Up @@ -5209,7 +5221,7 @@ function Test-VirtualMachineScaleSetSecurityTypeNoVMProfile
{
# Setup
$rgname = Get-ComputeTestResourceName;
$loc = Get-ComputeVMLocation;
$loc = "westus2";

try
{
Expand Down Expand Up @@ -5241,7 +5253,7 @@ function Test-VirtualMachineScaleSetSecurityTypeAndFlexDefaults
{
# Setup
$rgname = Get-ComputeTestResourceName;
$loc = Get-ComputeVMLocation;
$loc = "westus2";

try
{
Expand Down Expand Up @@ -5283,7 +5295,7 @@ function Test-VirtualMachineScaleSetDefaultImgWhenStandard
{
# Setup
$rgname = Get-ComputeTestResourceName;
$loc = Get-ComputeVMLocation;
$loc = "westus2";
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

future improvement, is there an API to call to see if there is availability in a region then select that region? I think the sku vm list api can do this.


try
{
Expand Down
23 changes: 18 additions & 5 deletions src/Compute/Compute.Test/ScenarioTests/VirtualMachineTests.ps1
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6705,7 +6705,7 @@ function Test-VirtualMachineSecurityType
{
# Setup
$rgname = Get-ComputeTestResourceName;
$loc = Get-ComputeVMLocation;
$loc = "westus2";

try
{
Expand Down Expand Up @@ -6820,7 +6820,7 @@ function Test-VirtualMachineSecurityTypeWithoutConfig
{
# Setup
$rgname = Get-ComputeTestResourceName;
$loc = Get-ComputeVMLocation;
$loc = "eastus2euap";
try
{
New-AzResourceGroup -Name $rgname -Location $loc -Force;
Expand Down Expand Up @@ -6864,6 +6864,16 @@ function Test-VirtualMachineSecurityTypeWithoutConfig

Assert-AreEqual $updated_vm.SecurityProfile.UefiSettings.VTpmEnabled $true;

# Update SecurityType to Standard. Errors - Changing property 'securityProfile.securityType' is not allowed.
Stop-AzVM -ResourceGroupName $rgname -Name $vmname2 -Force
Update-AzVm -ResourceGroupName $rgname -VM $res -SecurityType "Standard"
Start-AzVM -ResourceGroupName $rgname -Name $vmname2
$updated_vm = Get-AzVM -ResourceGroupName $rgname -Name $vmname2;

Assert-Null $updated_vm.SecurityProfile.SecurityType;
Assert-Null $updated_vm.SecurityProfile.UefiSettings;
Assert-Null $updated_vm.SecurityProfile.SecurityType;

# validate GA extension
# We removed this logic as per request fro the feature team.
# Keeping this code here as this may be added back in the future.
Expand Down Expand Up @@ -6895,7 +6905,7 @@ function Test-VirtualMachineSecurityTypeStandard
{
# Setup
$rgname = Get-ComputeTestResourceName;
$loc = Get-ComputeVMLocation;
$loc = "Westus2"
try
{
New-AzResourceGroup -Name $rgname -Location $loc -Force;
Expand All @@ -6918,7 +6928,10 @@ function Test-VirtualMachineSecurityTypeStandard
New-AzVM -ResourceGroupName $rgname -Location $loc -Name $vmname1 -Credential $cred -Size $vmsize -Image $imageName -DomainNameLabel $domainNameLabel1 -SecurityType $securityTypeStnd;
# Verify security value
$vm1 = Get-AzVM -ResourceGroupName $rgname -Name $vmname1;

# VM Gets created with SecurityType: Standard but response has securityProfile null
Assert-Null $vm1.SecurityProfile;
#Assert-AreEqual $vm1.SecurityProfile.SecurityType "Standard";

# validate GA extension is not installed by default.
$extDefaultName = "GuestAttestation";
Expand Down Expand Up @@ -7010,7 +7023,7 @@ function Test-VMDefaultsToTrustedLaunch
{
# Setup
$rgname = Get-ComputeTestResourceName;
$loc = Get-ComputeVMLocation;
$loc = "westus2"

try
{
Expand Down Expand Up @@ -7267,7 +7280,7 @@ function Test-VMDefaultsToTrustedLaunchWithNullEncryptionAtHost
{
# Setup
$rgname = Get-ComputeTestResourceName;
$loc = Get-ComputeVMLocation;
$loc = "westus2"

try
{
Expand Down
1,870 changes: 833 additions & 1,037 deletions ...ioTests.VirtualMachineScaleSetTests/TestVirtualMachineScaleSetDefaultImgWhenStandard.json
View file
Open in desktop

Large diffs are not rendered by default.

12,959 changes: 11,684 additions & 1,275 deletions ...est.ScenarioTests.VirtualMachineScaleSetTests/TestVirtualMachineScaleSetSecurityType.json
View file
Open in desktop

Large diffs are not rendered by default.

2,076 changes: 1,389 additions & 687 deletions ...ts.VirtualMachineScaleSetTests/TestVirtualMachineScaleSetSecurityTypeAndFlexDefaults.json
View file
Open in desktop

Large diffs are not rendered by default.

4,457 changes: 1,771 additions & 2,686 deletions ...ioTests.VirtualMachineScaleSetTests/TestVirtualMachineScaleSetSecurityTypeDefaulting.json
View file
Open in desktop

Large diffs are not rendered by default.

2,438 changes: 1,078 additions & 1,360 deletions ...irtualMachineScaleSetTests/TestVirtualMachineScaleSetSecurityTypeDefaultingFromImage.json
View file
Open in desktop

Large diffs are not rendered by default.

370 changes: 173 additions & 197 deletions ...oTests.VirtualMachineScaleSetTests/TestVirtualMachineScaleSetSecurityTypeNoVMProfile.json
View file
Open in desktop

Large diffs are not rendered by default.

1,650 changes: 951 additions & 699 deletions ...arioTests.VirtualMachineScaleSetTests/TestVirtualMachineScaleSetSecurityTypeStandard.json
View file
Open in desktop

Large diffs are not rendered by default.

2,368 changes: 1,533 additions & 835 deletions ...VirtualMachineScaleSetTests/TestVirtualMachineScaleSetSecurityTypeStandardWithConfig.json
View file
Open in desktop

Large diffs are not rendered by default.

3,398 changes: 1,070 additions & 2,328 deletions ...enarioTests.VirtualMachineScaleSetTests/TestVirtualMachineScaleSetSecurityTypeUpdate.json
View file
Open in desktop

Large diffs are not rendered by default.

4,830 changes: 2,085 additions & 2,745 deletions ...ests.VirtualMachineScaleSetTests/TestVirtualMachineScaleSetSecurityTypeWithoutConfig.json
View file
Open in desktop

Large diffs are not rendered by default.

2,215 changes: 1,079 additions & 1,136 deletions ...irtualMachineScaleSetTests/TestVirtualMachineScaleSetSecurityTypeWithoutConfigUpdate.json
View file
Open in desktop

Large diffs are not rendered by default.

3,173 changes: 1,708 additions & 1,465 deletions ...ommands.Compute.Test.ScenarioTests.VirtualMachineTests/TestVMDefaultsToTrustedLaunch.json
View file
Open in desktop

Large diffs are not rendered by default.

1,772 changes: 781 additions & 991 deletions ...narioTests.VirtualMachineTests/TestVMDefaultsToTrustedLaunchWithNullEncryptionAtHost.json
View file
Open in desktop

Large diffs are not rendered by default.

4,340 changes: 1,926 additions & 2,414 deletions ...mmands.Compute.Test.ScenarioTests.VirtualMachineTests/TestVirtualMachineSecurityType.json
View file
Open in desktop

Large diffs are not rendered by default.

2,376 changes: 1,012 additions & 1,364 deletions ...ompute.Test.ScenarioTests.VirtualMachineTests/TestVirtualMachineSecurityTypeStandard.json
View file
Open in desktop

Large diffs are not rendered by default.

3,659 changes: 2,210 additions & 1,449 deletions ...e.Test.ScenarioTests.VirtualMachineTests/TestVirtualMachineSecurityTypeWithoutConfig.json
View file
Open in desktop

Large diffs are not rendered by default.

1 change: 1 addition & 0 deletions src/Compute/Compute/ChangeLog.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -20,6 +20,7 @@

-->
## Upcoming Release
* Updated `New-AzVM`, `New-AzVmss`, `Update-AzVM`, and `Update-AzVmss` to pass `Standard` as an input of `-SecurityType` parameter.
* Added breaking change message for `Get-AzVMSize`.

## Version 9.1.0
Expand Down
16 changes: 12 additions & 4 deletions src/Compute/Compute/Generated/VirtualMachineScaleSet/VirtualMachineScaleSetUpdateMethod.cs
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -1365,16 +1365,20 @@ private void BuildPatchObject()
{
this.VirtualMachineScaleSetUpdate.VirtualMachineProfile.SecurityProfile = new SecurityProfile();
}
if (this.VirtualMachineScaleSetUpdate.VirtualMachineProfile.SecurityProfile.UefiSettings == null)
{
this.VirtualMachineScaleSetUpdate.VirtualMachineProfile.SecurityProfile.UefiSettings = new UefiSettings();
}
this.VirtualMachineScaleSetUpdate.VirtualMachineProfile.SecurityProfile.SecurityType = this.SecurityType;
if (this.VirtualMachineScaleSetUpdate.VirtualMachineProfile.SecurityProfile.SecurityType?.ToLower() == ConstantValues.TrustedLaunchSecurityType || this.VirtualMachineScaleSetUpdate.VirtualMachineProfile.SecurityProfile.SecurityType?.ToLower() == ConstantValues.ConfidentialVMSecurityType)
{
if (this.VirtualMachineScaleSetUpdate.VirtualMachineProfile.SecurityProfile.UefiSettings == null)
{
this.VirtualMachineScaleSetUpdate.VirtualMachineProfile.SecurityProfile.UefiSettings = new UefiSettings();
}
this.VirtualMachineScaleSetUpdate.VirtualMachineProfile.SecurityProfile.UefiSettings.VTpmEnabled = this.VirtualMachineScaleSetUpdate.VirtualMachineProfile.SecurityProfile.UefiSettings.VTpmEnabled == null ? true : this.EnableVtpm;
this.VirtualMachineScaleSetUpdate.VirtualMachineProfile.SecurityProfile.UefiSettings.SecureBootEnabled = this.VirtualMachineScaleSetUpdate.VirtualMachineProfile.SecurityProfile.UefiSettings.SecureBootEnabled == null ? true : this.EnableSecureBoot;
}
else
{
this.VirtualMachineScaleSetUpdate.VirtualMachineProfile.SecurityProfile.UefiSettings = null;
}
}
// Only used for SecurityType == TrustedLaunch
if (this.IsParameterBound(c => c.EnableVtpm))
Expand Down Expand Up @@ -2203,6 +2207,10 @@ private void BuildPutObject()
this.VirtualMachineScaleSet.VirtualMachineProfile.SecurityProfile.UefiSettings.VTpmEnabled = this.VirtualMachineScaleSet.VirtualMachineProfile.SecurityProfile.UefiSettings.VTpmEnabled == null ? true : this.EnableVtpm;
this.VirtualMachineScaleSet.VirtualMachineProfile.SecurityProfile.UefiSettings.SecureBootEnabled = this.VirtualMachineScaleSet.VirtualMachineProfile.SecurityProfile.UefiSettings.SecureBootEnabled == null ? true : this.EnableSecureBoot;
}
else
{
this.VirtualMachineScaleSet.VirtualMachineProfile.SecurityProfile.UefiSettings = null;
}
}
// Only used for SecurityType == TrustedLaunch
if (this.IsParameterBound(c => c.EnableVtpm))
Expand Down
2 changes: 1 addition & 1 deletion src/Compute/Compute/Manual/VirtualMachineScaleSetCreateOrUpdateMethod.cs
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -752,7 +752,7 @@ async Task SimpleParameterSetExecuteCmdlet(IAsyncCmdlet asyncCmdlet)
if (this.IsParameterBound(c => c.SecurityType)
&& this.SecurityType?.ToLower() == ConstantValues.StandardSecurityType)
{
this.SecurityType = null;
this.SecurityType = "Standard";
}

//TrustedLaunch value defaulting for UEFI values.
Expand Down
4 changes: 2 additions & 2 deletions src/Compute/Compute/Strategies/ComputeRp/VirtualMachineScaleSetStrategy.cs
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -108,7 +108,7 @@ internal static ResourceConfig<VirtualMachineScaleSet> CreateVirtualMachineScale
PlatformFaultDomainCount = platformFaultDomainCount,
VirtualMachineProfile = new VirtualMachineScaleSetVMProfile
{
SecurityProfile = ((encryptionAtHost == true || enableVtpm != null || enableSecureBoot != null || securityType != null) && (securityType?.ToLower() != ConstantValues.StandardSecurityType))
SecurityProfile = (encryptionAtHost == true || enableVtpm != null || enableSecureBoot != null || securityType != null)
? new SecurityProfile
{
EncryptionAtHost = encryptionAtHost,
Expand Down Expand Up @@ -278,7 +278,7 @@ internal static ResourceConfig<VirtualMachineScaleSet> CreateVirtualMachineScale
PlatformFaultDomainCount = platformFaultDomainCount,
VirtualMachineProfile = new VirtualMachineScaleSetVMProfile
{
SecurityProfile = ((encryptionAtHost == true || enableVtpm != null || enableSecureBoot != null || securityType != null) && (securityType?.ToLower() != ConstantValues.StandardSecurityType))
SecurityProfile = (encryptionAtHost == true || enableVtpm != null || enableSecureBoot != null || securityType != null)
? new SecurityProfile
{
EncryptionAtHost = encryptionAtHost,
Expand Down
4 changes: 2 additions & 2 deletions src/Compute/Compute/Strategies/ComputeRp/VirtualMachineStrategy.cs
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -152,7 +152,7 @@ public static ResourceConfig<VirtualMachine> CreateVirtualMachineConfig(
Priority = priority,
EvictionPolicy = evictionPolicy,
BillingProfile = (maxPrice == null) ? null : new BillingProfile(maxPrice),
SecurityProfile = ((encryptionAtHostPresent == true || enableVtpm != null || enableSecureBoot != null || securityType != null) && (securityType?.ToLower() != ConstantValues.StandardSecurityType))
SecurityProfile = (encryptionAtHostPresent == true || enableVtpm != null || enableSecureBoot != null || securityType != null)
? new SecurityProfile
{
EncryptionAtHost = encryptionAtHostPresent,
Expand Down Expand Up @@ -257,7 +257,7 @@ public static ResourceConfig<VirtualMachine> CreateVirtualMachineConfig(
Priority = priority,
EvictionPolicy = evictionPolicy,
BillingProfile = (maxPrice == null) ? null : new BillingProfile(maxPrice),
SecurityProfile = ((encryptionAtHostPresent == true || enableVtpm != null || enableSecureBoot != null || securityType!= null) && (securityType?.ToLower() != ConstantValues.StandardSecurityType))
SecurityProfile = (encryptionAtHostPresent == true || enableVtpm != null || enableSecureBoot != null || securityType!= null)
? new SecurityProfile
{
EncryptionAtHost = encryptionAtHostPresent,
Expand Down
18 changes: 1 addition & 17 deletions src/Compute/Compute/VirtualMachine/Operation/NewAzureVMCommand.cs
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -606,7 +606,7 @@ public async Task<ResourceConfig<VirtualMachine>> CreateConfigAsync()
&& _cmdlet.SecurityType != null
&& _cmdlet.SecurityType.ToString().ToLower() == ConstantValues.StandardSecurityType)
{
_cmdlet.SecurityType = null;
_cmdlet.SecurityType = "Standard";
}

var resourceGroup = ResourceGroupStrategy.CreateResourceGroupConfig(_cmdlet.ResourceGroupName);
Expand Down Expand Up @@ -1098,22 +1098,6 @@ public void DefaultExecuteCmdlet()
}
}

// Standard security type removing value since API does not support it yet.
if (this.VM.SecurityProfile?.SecurityType != null
&& this.VM.SecurityProfile?.SecurityType?.ToString().ToLower() == ConstantValues.StandardSecurityType)
{
if (this.VM.SecurityProfile.UefiSettings?.SecureBootEnabled == null
&& this.VM.SecurityProfile.UefiSettings?.VTpmEnabled == null
&& this.VM.SecurityProfile.EncryptionAtHost == null)
{
this.VM.SecurityProfile = null;
}
else
{
this.VM.SecurityProfile.SecurityType = null;
}
}

if (ShouldProcess(this.VM.Name, VerbsCommon.New))
{
ExecuteClientAction(() =>
Expand Down
15 changes: 10 additions & 5 deletions src/Compute/Compute/VirtualMachine/Operation/UpdateAzureVMCommand.cs
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -166,7 +166,7 @@ public class UpdateAzureVMCommand : VirtualMachineBaseCmdlet
ValueFromPipelineByPropertyName = true,
Mandatory = false)]
[ValidateNotNullOrEmpty]
[PSArgumentCompleter("TrustedLaunch", "ConfidentialVM")]
[PSArgumentCompleter("TrustedLaunch", "ConfidentialVM", "Standard")]
public string SecurityType { get; set; }

[Parameter(
Expand Down Expand Up @@ -346,16 +346,21 @@ public override void ExecuteCmdlet()
{
parameters.SecurityProfile = new SecurityProfile();
}
if (parameters.SecurityProfile.UefiSettings == null)
{
parameters.SecurityProfile.UefiSettings = new UefiSettings();
}
parameters.SecurityProfile.SecurityType = this.SecurityType;

if (parameters.SecurityProfile.SecurityType == "TrustedLaunch" || parameters.SecurityProfile.SecurityType == "ConfidentialVM")
{
if (parameters.SecurityProfile.UefiSettings == null)
{
parameters.SecurityProfile.UefiSettings = new UefiSettings();
}
parameters.SecurityProfile.UefiSettings.VTpmEnabled = parameters.SecurityProfile.UefiSettings.VTpmEnabled == null ? true : this.EnableVtpm;
parameters.SecurityProfile.UefiSettings.SecureBootEnabled = parameters.SecurityProfile.UefiSettings.SecureBootEnabled == null ? true : this.EnableSecureBoot;
}
else
{
parameters.SecurityProfile.UefiSettings = null;
}
}

if (this.IsParameterBound(c => c.EnableVtpm))
Expand Down