1. Proposed title of this feature request

VBS with Credential Guard + vGPU: OpenShift Virtualization fully secure windows option with a vGPU option for VDI workloads

2. What is the nature and description of the request?

• Day 0: A Windows 11 VM to have a vTPM, running VBS with Credential Guard.
• Day 1: A Windows 11 VM to have a vTPM, running VBS with Credential Guard and using a vGPU.
• Day 1: the vTPM to be optionally backed by an external KMS or similar.
• It can VMotion to other hosts in the cluster for administrative changes or If the hypervisor is too loaded in exceptional circumstances, it would generally be better if non vGPU’ed workloads get moved first (but end state would be everyone has vGPUs).

The underlying requirements/constraints that impact this ask are

• We use Citrix
• The CPU Architecture can be either AMD or Intel. It was a considerable journey to get AMD to work, we expect day 1 to be defined as when it is fully working for both architectures.
• Same configuration as physical desktops
• Encryption at rest and in flight support for all storage operations
• We understand that depending on the technology there will be limits on the number of VMs that can have a vGPU per hypervisor-host.
• Once we get this working for VDI, we would expect that It could be translated to VSI, though our datacenter capacity, and current strategy make this unlikely.

3. Why does the customer need this? (List the business requirements here)

VMware migration to OpenShift Virtualization for VDI workloads

4. List any affected packages or components.

OpenShift Virtualization