CCG Custom Plugin

What is your question?
I have been setting up a custom CCG plugin on my local machine to run a windows container as non-domain joined.

When starting the container, using the following command:
docker run -it --security-opt "CredentialSpec=file://gmsa.json" mcr.microsoft.com/windows/servercore:ltsc2022 powershell
I can see the following message in the Microsoft-Windows-Containers-CCG/Admin log:
Container Credential Guard instantiated the plugin: {3C0BED28-38FC-42A9-A6AC-967A4839DF61}

However the container doesn't start, but just gives the following error:
docker: Error response from daemon: hcs::CreateComputeSystem 566516d3912884945d031f7982c6fea1977f22c5d07d40766173354444fb7fc5: winapi error #3489661095.

What can I do to get a more detailed information regarding the error, as it is quite difficult to understand what is failing.

Configuration:

• Edition: Windows 11
• Container engine: docker
• Container Engine version: 27.2.0

Start by reproducing the Docker command with the Windows Server Core ltsc2022 image and reviewing the Microsoft-Windows-Containers-CCG/Admin log alongside the Windows 11 and Docker 27.2.0 configuration. Done means identifying why the non-domain-joined container fails with the reported HCS error and documenting how to obtain or expose a more detailed diagnostic.