Event details

Navigating Secure Boot certificate updates in virtualized environments? Drop in to Secure Boot Office Hours and ask your questions live in the comments. For one hour, experts will be available to dis...
Heather_Poulsen
Updated Jul 07, 2026
Office Hours
cedricbrady's avatar
cedricbrady
Copper Contributor
Jul 08, 2026

Do we have guidance for applying the Secure Boot certificate update to VMware vSphere virtual machines, especially VDI-style VMs that use vTPM and BitLocker encryption?

  • Grace_VMW's avatar
    Grace_VMW
    Copper Contributor
    Jul 08, 2026

    Follow Microsoft's guidance to update the DB and KEK. If the PK is NULL, use VMware's Capsule PK update method to update it first prior to applying the KEK update.

    https://knowledge.broadcom.com/external/article/423893/secure-boot-certificate-expirations-and.html

  • Ramakumar's avatar
    Ramakumar
    Copper Contributor
    Jul 08, 2026

     

     

    Please subscribe to Broadcom KB specified below, upcoming release has a solution for Secure Boot certificate that use vTPM and BitLocker encryption VMs

    https://knowledge.broadcom.com/external/article/423893/secure-boot-certificate-expirations-and.html

  • sandeepbyreddy's avatar
    sandeepbyreddy
    Copper Contributor
    Jul 08, 2026

    Yes. When we provide the patch, we will release the detailed documentation for the same.
    As of now, vSphere team has published a KB article with a detailed overview. Please refer to the KB article.