Question

You are planning a new pooled host pool for Contoso's finance department. Security policy requires that all session hosts support Secure Boot and virtual TPM (vTPM) to enable Trusted Launch. You intend to deploy the session hosts from a Windows 11 Enterprise multi-session image stored in an Azure Compute Gallery. When you configure the image version and select the VM size for the session hosts, which combination ensures the session hosts can be deployed with Trusted Launch enabled?

Accepted Answer

Create the image definition with a Generation 2 (Trusted Launch) VM configuration and choose a VM size that supports Trusted Launch, such as a Dsv5-series size

Answer

Create the image definition with a Generation 1 VM configuration and choose any general-purpose VM size, then enable Trusted Launch during host pool creation

Answer

Use a Generation 2 image definition but deploy to an Av2-series VM size, which enforces Trusted Launch by default

Answer

Create the image definition with a Generation 1 VM configuration and enable Secure Boot manually inside each session host after deployment