The problem here seems to mostly have been that some exotic virtualization software insists on offering broken TPM.