Event details

Navigating Secure Boot certificate updates in virtualized environments? Drop in to Secure Boot Office Hours and ask your questions live in the comments. For one hour, experts will be available to dis...
Heather_Poulsen
Updated Jul 07, 2026
Office Hours
Techdawgs's avatar
Techdawgs
Occasional Reader
Jul 08, 2026

I found this page useful for updating the KEK certificate: 

https://knowledge.broadcom.com/external/article/423919#disk_preparation 

I did have issues creating the disk, but I created a virtual floppy, and it worked.

  • Grace_VMW's avatar
    Grace_VMW
    Copper Contributor
    Jul 08, 2026

    This method can update the KEK from the firmware. However, our recommendation is to update the KEK within the OS using Microsoft's official guidance once the Windows OEM Devices PK is in place.

  • Ramakumar's avatar
    Ramakumar
    Copper Contributor
    Jul 08, 2026

    Its manual method of updating PK,KEK , usually we recommend this method for older releases like vSphere 6.7 and 7.x 

    For vSphere 8.x we recommend to use 803j and refer below KB

    https://knowledge.broadcom.com/external/article/423893/secure-boot-certificate-expirations-and.html