Event details

Join Microsoft engineers for a live Ask Microsoft Anything (AMA) focused on Secure Boot certificate updates in Windows Server environments. We’ll answer your questions about deployment planning, firm...
Heather_Poulsen
Updated Jun 30, 2026
AMA
Jawshome's avatar
Jawshome
Occasional Reader
Jul 01, 2026

The custom ESXi image from Dell etc. has not yet been updated with the new certs - AFAIK this means the updates to VM guests have to wait until after their ESXi hosts have been updated. The timelines are getting really uncomfortable - anybody else thinks this should have been done last year?  :-(

 

Grace_Tang's avatar
Grace_Tang
Occasional Reader
Jul 05, 2026

vSphere VM Secure Boot certificates do not depend on the ESXi host's Secure Boot certificates.
Please refer to the Broadcom KB https://knowledge.broadcom.com/external/article/423893 to see how to update VM PK, KEK and DB certificates.