You cannot migrate a logical domain that has bound cryptographic units if it has more than one VCPU. Attempts to migrate such a domain will fail.
