Deploy Win11 with windows_sysprep_text fails

Terraform Providers
1

Hi,
I try to deploy a windows 11 with tpm from a template.

when using this:

clone {
    template_uuid = data.vsphere_virtual_machine.w11_sysprep_tpl.id
    linked_clone = false


    customize {
      timeout = 0
      network_interface {}
      windows_options {
        auto_logon       = true
        auto_logon_count = 3
        admin_password   = "Vmware1"
        computer_name    = "windows11-clone"
        workgroup        = "WORKGROUP"
        run_once_command_list = [
          # activate RDP
          "powershell -Command \"Set-ItemProperty -Path 'HKLM:\\System\\CurrentControlSet\\Control\\Terminal Server' -Name 'fDenyTSConnections' -Value 0\"",
          # Firewall for RDP
          "powershell -Command \"Enable-NetFirewallRule -DisplayGroup 'Remote Desktop'\"",
          # set network to private
          "powershell -Command \"Get-NetConnectionProfile | Set-NetConnectionProfile -NetworkCategory Private\"",
          # activate file sharing
          "powershell -Command \"Set-SmbServerConfiguration -EnableSMB1Protocol $false -EnableSMB2Protocol $true -Force\"",
          "powershell -Command \"Enable-NetFirewallRule -DisplayGroup 'File and Printer Sharing'\""
        ]
      }
    }
  }

it works as expected beside the fact, that the w11 than asks a few questions on start.

No I wanted to make it with sysprep:

    customize {
      timeout = 0
      network_interface {}
      windows_sysprep_text = <<EOT
      <unattend xmlns="urn:schemas-microsoft-com:unattend">
        <settings pass="specialize">
          <component name="Microsoft-Windows-Shell-Setup">
            <ComputerName>test-win11</ComputerName>
          </component>
        </settings>
      </unattend>
      EOT
    }
  }

but I just get

Error: error sending customization spec: Cannot complete customization.

in debug there is nothing useful. I’m using vsphere 2.1.0 provider because of TPM. Using OVA isn’t possible because of a simple reason: you can’t export vms/templates with TPM to OVA/OVF, even I think this is not related.

I have no idea anymore whats wrong here. ESXI is 8.x, tried multiple different templates etcpp, validated the XML but it looks like the customization is send BEFORE the machine is powered on in this case.

Do I miss something?