Update Windows secureboot certificates on Proxmox
- Check with the following command, if the new certificates are already installed
[System.Text.Encoding]::ASCII.GetString((Get-SecureBootUEFI db).bytes) -match 'Windows UEFI CA 2023'
- If the return value is false, go in the registry to
Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecureBootand set the value (as hex) to0x00005944 - Now enroll the new certificates over the Proxmox GUI (Click on the EFI Disk, Disk Action and Enroll Updated Certificates)
- Shutdown the VM and Boot it (not a reboot!)
- Open the registry and got to
Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecureBoot, wait until a new key exists which starts likeRestartRequiredFor.... And inComputer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecureBoot\ServicingtheUEFICA2023Statusshould beInProgress - Then reboot and wait until
AvaiableUpdatesthe value is0x00004000(Registry, underComputer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecureBoot). In the Registry underComputer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecureBoot\Servicing, theUEFICA2023Statusshould beUpdated - Now reexecute the command from step one, it should now return
True