Bugzilla – Bug 1212891
Win11 installation fails with process stopping in firmware
Last modified: 2023-07-31 16:57:13 UTC
when trying to install a recent(!) image of Win11 in KVM in a machine with either paththrough of TPM or virtualized TPM the process stalls in "firmware Tiano Core". There is no error message, the iso simply stalls when loading the Tiano Core firmware. I tried also to download another image, I checked the checksum. But still, even if selecting correctly the iso, no luck. Operating System: openSUSE Tumbleweed 20230628 KDE Plasma Version: 5.27.6 KDE Frameworks Version: 5.107.0 Qt Version: 5.15.10 Kernel Version: 6.3.9-1-default (64-bit) Graphics Platform: X11 Processors: 12 × AMD Ryzen 5 5600G with Radeon Graphics Memory: 62.6 GiB of RAM Graphics Processor: AMD Radeon Pro W5500 Product Name: X570 Phantom Gaming 4 Image hit by this is: Win11_22H2_Italian_x64v2.iso
Is this something now, like it's happening after a specific update? Also, does a different Windows image (if you have any) or a Linux image work (with the same configuration, i.e., with virtual or passed-through TPM)? Does the Windows image work without any TPM?
The only thing I was able to know is, (by searching the web), that the last isos of the Win11 are not compatible (the contribution stated "yet") with KVM. Win11 requires a TPM now mandatory. Isos: I tried two separate iso downloaded and counterchecked the integrity with sha256. TPM: with "emulation, TIS 1.2" hangs in firmware with "passthrough" on /dev/tpm0 TIS (after showing BdsDxe no bootable option or device) press any key for boot manager which gives: no device to be booted.. you select in boot manager TIS 1.2 but then it starts but hangs in tianocore firmware. Substantially, this is a AMD4 socket with CPU integrated tpm, and for what I know 1.2. trying emulated TIS 2.0 gives "tiano core - hangs" without any tpm (erasing the virtual device entry): hangs in TianoCore I have several linux images working very well on this machine (mageia, tumbleweed, deepin). None have problems.
"know" obviously reads now.....
(In reply to Stakanov Schufter from comment #2) > TPM: > with "emulation, TIS 1.2" hangs in firmware > > with "passthrough" on /dev/tpm0 TIS (after showing BdsDxe no bootable option > or device) press any key for boot manager > which gives: no device to be booted.. you select in boot manager TIS 1.2 but > then it starts but hangs in tianocore firmware. Substantially, this is a > AMD4 socket with CPU integrated tpm, and for what I know 1.2. > > trying emulated TIS 2.0 gives "tiano core - hangs" > > without any tpm (erasing the virtual device entry): hangs in TianoCore > Ok. I'm going to set needinfo to Kirk and see if he can chime in, as he's got some experience with this Windows+TMP VMs > I have several linux images working very well on this machine (mageia, > tumbleweed, deepin). None have problems. > And (at least some of them) have either virtual or passed TPM too, right?
I tried several Win11 vm installations on KVM Intel and AMD cpus on sles 15sp5. I used virt-manager to do the installs and took defaults for the TPM and firmware. The TPM default is TPM v2.0 CRB. The default firmware was UEFI which resulted in ovmf-x86_64-smm-ms-code.bin. A v2.0 TMP and UEFI is required for Win11. The VMs installed without issue. I didn't have a TW host so I installed TW as a VM on sles 15sp5. I then tried the same installations as before on sles 15sp5. All combinations caused the VMs to hang on the Tiano Core screen after telling the install to boot off the DVD and before any Windows install screes should have appeared. This sounds like the issue described in this bug. I also tried disabling Secure Boot. That didn't help. The vm still hung on the Tiano Core screen as before. I then copied the sles 15sp5 ovmf-x86_64-smm-ms-code* files into the TW VM and tried the installation again. Using the 15sp5 ovmf files allowed the Win11 VM to install as normal. This makes me think there is some issue with the TW ovmf files.
(In reply to Kirk Allan from comment #5) > I didn't have a TW host so I installed TW as a VM on sles 15sp5. I then > tried the same installations as before on sles 15sp5. All combinations > caused the VMs to hang on the Tiano Core screen after telling the install to > boot off the DVD and before any Windows install screes should have appeared. > This sounds like the issue described in this bug. > > I also tried disabling Secure Boot. That didn't help. The vm still hung on > the Tiano Core screen as before. > > I then copied the sles 15sp5 ovmf-x86_64-smm-ms-code* files into the TW VM > and tried the installation again. Using the 15sp5 ovmf files allowed the > Win11 VM to install as normal. This makes me think there is some issue with > the TW ovmf files. CC Joey for this...
(In reply to Kirk Allan from comment #5) > I tried several Win11 vm installations on KVM Intel and AMD cpus on sles > 15sp5. I used virt-manager to do the installs and took defaults for the TPM > and firmware. The TPM default is TPM v2.0 CRB. The default firmware was > UEFI which resulted in ovmf-x86_64-smm-ms-code.bin. A v2.0 TMP and UEFI is > required for Win11. The VMs installed without issue. > > I didn't have a TW host so I installed TW as a VM on sles 15sp5. I then > tried the same installations as before on sles 15sp5. All combinations > caused the VMs to hang on the Tiano Core screen after telling the install to > boot off the DVD and before any Windows install screes should have appeared. > This sounds like the issue described in this bug. > > I also tried disabling Secure Boot. That didn't help. The vm still hung on > the Tiano Core screen as before. > > I then copied the sles 15sp5 ovmf-x86_64-smm-ms-code* files into the TW VM > and tried the installation again. Using the 15sp5 ovmf files allowed the > Win11 VM to install as normal. This makes me think there is some issue with > the TW ovmf files. The description is perfectly reproducing the issue I am facing. Thank you for your effort.
(In reply to Kirk Allan from comment #5) > I tried several Win11 vm installations on KVM Intel and AMD cpus on sles > 15sp5. I used virt-manager to do the installs and took defaults for the TPM > and firmware. The TPM default is TPM v2.0 CRB. The default firmware was > UEFI which resulted in ovmf-x86_64-smm-ms-code.bin. A v2.0 TMP and UEFI is > required for Win11. The VMs installed without issue. > > I didn't have a TW host so I installed TW as a VM on sles 15sp5. I then > tried the same installations as before on sles 15sp5. All combinations > caused the VMs to hang on the Tiano Core screen after telling the install to > boot off the DVD and before any Windows install screes should have appeared. > This sounds like the issue described in this bug. > > I also tried disabling Secure Boot. That didn't help. The vm still hung on > the Tiano Core screen as before. > > I then copied the sles 15sp5 ovmf-x86_64-smm-ms-code* files into the TW VM > and tried the installation again. Using the 15sp5 ovmf files allowed the > Win11 VM to install as normal. This makes me think there is some issue with > the TW ovmf files. Thanks for Kirk's testing. The version of OVMF on 15-SP5 is edk2-edk2-stable202208, and the version of OVMF on current Tumbleweed is edk2-stable202302. Looks that something wrong between edk2-stable202208..edk2-stable202302. I don't know where can download the Win11 image for debugging. But I built a edk2-stable202211 ovmf in my home branch: https://build.opensuse.org/package/show/home:joeyli:branches:Virtualization/ovmf It can help to narrow down edk2 version of issue.
(In reply to Joey Lee from comment #8) > (In reply to Kirk Allan from comment #5) > I don't know where can download the Win11 image for debugging. But I built a > edk2-stable202211 ovmf in my home branch: > > https://build.opensuse.org/package/show/home:joeyli:branches:Virtualization/ > ovmf > > It can help to narrow down edk2 version of issue. O.K., forgive me if I am misunderstanding, English is at times a bit treacherous so to say, but, if the Win11 image for debugging" is the iso, then you can download it here: https://www.microsoft.com/software-download/windows11 as product license code should do any friend that can pass you on the code he/she (put whatever here you like) possesses. I was "granted" an obligatory code for a trashy notebook, I think there are plenty people that have one spare. If instead you referred to image as ovmf or something analogous, I apologize for this unnecessary noise. The issue presented with me with the ITA version but I am dead sure all versions hit the same issue.
Hi Stakanov (In reply to Stakanov Schufter from comment #9) > (In reply to Joey Lee from comment #8) > > (In reply to Kirk Allan from comment #5) > > > I don't know where can download the Win11 image for debugging. But I built a > > edk2-stable202211 ovmf in my home branch: > > > > https://build.opensuse.org/package/show/home:joeyli:branches:Virtualization/ > > ovmf > > > > It can help to narrow down edk2 version of issue. > > O.K., forgive me if I am misunderstanding, English is at times a bit > treacherous so to say, but, if the Win11 image for debugging" is the iso, > then you can download it here: > https://www.microsoft.com/software-download/windows11 > Thanks for your link! It's what I need. I will download win11 iso and try to reprodice issue. > as product license code should do any friend that can pass you on the code > he/she (put whatever here you like) possesses. I was "granted" an obligatory > code for a trashy notebook, I think there are plenty people that have one > spare. > > If instead you referred to image as ovmf or something analogous, I apologize > for this unnecessary noise. The issue presented with me with the ITA version > but I am dead sure all versions hit the same issue.
(In reply to Joey Lee from comment #10) > Thanks for your link! It's what I need. I will download win11 iso and try to > reprodice issue. > Hey, Joey, as usual, thanks for all your efforts on these firmware-related issues. I'll assign the bug to you, for now, to better reflect what's happening and who's working on it. Of course, let use know if you need help, or if you think this should be given to someone else
IIRC, The issue occurs since using win11 22H2 as guest os, It won't happen if using eariler win11 version. I have two win11 isos. One is an older win11 iso(10.0.22000.318), It can be successfully installed with edk2-stable202302. The other is win11 22H2 iso(10.0.22621.1702), It hits this issue with edk2-stable202302. The issue won't occur with edk2-stable202211 of comment#8. So we can narrow down the range of issue to between edk2-stable202211 and edk2-stable202302.
Thank you very much for fixing the issue. I installed today without problems. Closing as resolved.