Forum Discussion
Windows Server 2022 - devices not booting when Secure Boot enabled (KB5022842)
- DavidYorkshireMar 14, 2023Iron Contributor
Update
Patch Tuesday today. I checked the Microsoft report on the issue (M365 console, Health, Windows Release Health, Server 2022). It appears that Microsoft is still claiming that this issue only affects VMs on VMware 7.x and below, and that as VMWare have patched it Microsoft doesn't need to do anything:
"Resolution: This issue is resolved in VMware ESXi 7.0 U3k, released on February 21st 2023 [link]. No update from Microsoft is needed for this issue."
However, I decided to actually check in case they had quietly resolved the issue. I have two affected PowerEdge servers - a T430 and an R730. I patched them both with the latest Windows updates, rebooted, then rebooted again and went into the BIOS settings and tried turning Secure Boot back on.
And they work again! Boot fine, with Secure Boot turned on. So it would appear that Microsoft has done something with today's update to fix the problem.
- Kenji McXntoshMar 15, 2023Copper Contributor
DavidYorkshire I concur. My B660 system with Hyper-V already loaded that failed to boot when KB5022842 was applied, now boots fine with that KB rolled back and KB5023705 loaded. In addition, my B760 system that would not boot if I attempted to install Hyper-V because KB5022842 had already been applied, booted fine once KB5023705 was applied and then Hyper-V installed.
For those that want to really geek-out. I compiled a short list of what I think are the relevant changes between the Feb and Mar CU:
"stornvme.sys","10.0.20348.1547","03-Feb-2023","02:17","233,504"
"stornvme.sys","10.0.20348.1607","08-Mar-2023","23:58","230,768"
"VmComputeAgent.exe","10.0.20348.1366","03-Feb-2023","13:53","1,492,352"
"VmComputeAgent.exe","10.0.20348.1607","09-Mar-2023","07:23","1,492,352"
"vmcompute.exe","10.0.20348.1547","03-Feb-2023","07:41","4,026,384"
"vmcompute.exe","10.0.20348.1607","09-Mar-2023","05:03","4,023,664"
"vmchipset.dll","10.0.20348.1547","03-Feb-2023","07:41","1,025,360"
"vmchipset.dll","10.0.20348.1607","09-Mar-2023","05:03","1,025,408"
"hvservice.sys","10.0.20348.1311","03-Feb-2023","13:53","136,536"
"hvservice.sys","10.0.20348.1607","09-Mar-2023","05:03","136,576"
"hvloader.dll","10.0.20348.1311","03-Feb-2023","13:53","148,832"
"hvloader.dll","10.0.20348.1607","09-Mar-2023","05:03","148,864"
"hvax64.exe","10.0.20348.1547","03-Feb-2023","07:42","1,630,232"
"hvax64.exe","10.0.20348.1607","09-Mar-2023","05:03","1,627,472"
"hvix64.exe","10.0.20348.1547","03-Feb-2023","07:42","1,732,624"
"hvix64.exe","10.0.20348.1607","09-Mar-2023","05:03","1,729,864"
"kdhvcom.dll","10.0.20348.1311","03-Feb-2023","13:53","58,704"
"kdhvcom.dll","10.0.20348.1607","09-Mar-2023","05:03","58,704"
"vmms.exe","10.0.20348.1547","03-Feb-2023","07:41","14,792,064"
"vmms.exe","10.0.20348.1607","09-Mar-2023","05:03","14,787,920"
Hope this helps. 🙂