Event details

Navigating Secure Boot certificate updates in virtualized environments? Drop in to Secure Boot Office Hours and ask your questions live in the comments. For one hour, experts will be available to dis...
Heather_Poulsen
Updated Jul 07, 2026
Office Hours
cedricbrady's avatar
cedricbrady
Copper Contributor
Jul 08, 2026

Do we have guidance for applying the Secure Boot certificate update to VMware vSphere virtual machines, especially VDI-style VMs that use vTPM and BitLocker encryption?

Grace_VMW's avatar
Grace_VMW
Copper Contributor
Jul 08, 2026

Follow Microsoft's guidance to update the DB and KEK. If the PK is NULL, use VMware's Capsule PK update method to update it first prior to applying the KEK update.

https://knowledge.broadcom.com/external/article/423893/secure-boot-certificate-expirations-and.html