To force the tunnel to switch back to the primary use the following commandtimeout floating-conn 0:00:30

Although I haven't tried Michael's route on getting it into Hyper-V, I do know ISE can run on Hyper-V and they're built on similar platforms. Also, here's another working option to get FMC in Hyper-V using the KVM version ...https://www.linkedin.com/...

Simply amazing it took them this long to implement this. Another thing to consider, is this throws IKEv2 failover out the window for ASA 5506-X running FirePower, because you cannot have anything higher than 9.9.2.x. You would have to replace it with...

The management tunnel isn't tied to any user tunnel, it just becomes active when no user tunnel is connected. Only one management tunnel can be configured at a time.