Create a Linux AMI for NitroTPM support
You configure your Linux AMI for NitroTPM support when you register the AMI. You can’t configure NitroTPM support later.
For the list of Windows AMIs that are preconfigured for NitroTPM support, see Prerequisites for launching Windows instances in the Amazon EC2 User Guide for Windows Instances.
To configure a Linux AMI for NitroTPM support
Use the register-image command and set the tpm-support
parameter to
v2.0
and the boot-mode
parameter to uefi
.
aws ec2 register-image \ --region
us-east-1
\ --namemy-image
\ --boot-mode uefi \ --architecture x86_64 \ --root-device-name /dev/xvda \ --block-device-mappings DeviceName=/dev/xvda,Ebs={SnapshotId=snap-0123456789example
} DeviceName=/dev/xvdf,Ebs={VolumeSize=10} \ --tpm-support v2.0
Expected output
{
"ImageId": "ami-0123456789example
"
}