What's the current situation with VMware and secure boot.  Broadcom has been "working on an automated solution with Microsoft" for quite some time, and I have the feeling they will not have one before the deadline.  There's an automated script that uses the delete NVRAM method which Broadcom has since disavowed as a valid solution and warns it can cause problems with the VM.