Create a Linux AMI for NitroTPM support - Amazon Elastic Compute Cloud

Create a Linux AMI for NitroTPM support

You configure your Linux AMI for NitroTPM support when you register the AMI. You can’t configure NitroTPM support later.

For the list of Windows AMIs that are preconfigured for NitroTPM support, see Prerequisites for launching Windows instances in the Amazon EC2 User Guide for Windows Instances.

To configure a Linux AMI for NitroTPM support

Use the register-image command and set the tpm-support parameter to v2.0 and the boot-mode parameter to uefi.

aws ec2 register-image \
    --region us-east-1 \
    --name my-image \
    --boot-mode uefi \
    --architecture x86_64 \
    --root-device-name /dev/xvda \
    --block-device-mappings DeviceName=/dev/xvda,Ebs={SnapshotId=snap-0123456789example} DeviceName=/dev/xvdf,Ebs={VolumeSize=10} \
    --tpm-support v2.0

Expected output

{
"ImageId": "ami-0123456789example"
}