nothing like losing a whole day because virtualized hardware is buggy :)

ye?

EC2's NitroTPM

it's TPM2_GetCapability implementation appears to return garbage if you request TPM properties and ask for < 9 properties

haven't tried out Azure's yet to see how it fares

9 or more though and it works

(same test on a hardware tpm works with any amount)