Secure Boot – Microsoft UEFI CA 2023 certificate support in current Proxmox VE versio

[powersupport]

Hi,

We are preparing Windows Server VMs for Microsoft's Secure Boot certificate updates (Microsoft UEFI CA 2023).

We are currently using Proxmox VE with Secure Boot enabled and EFI disks (OVMF).

May I confirm:

1. Does our current Proxmox version include the updated Microsoft UEFI CA 2023 certificate in OVMF?
2. Is upgrading to Proxmox VE 9.1 required to support this?

Thank you.

 

[fba]

What additional information do you need aside of what was provided as answer in the other thread?

U

Post in thread 'Secure Boot – Microsoft UEFI CA 2023 Certificate Not Included in EFI Disk'

Feb 13, 2026

If you perform a fresh installation, it will be set to `ms-cert=2023w` and thus included. It also appears to be possible to add it via command.

qemu-server (9.1.4) trixie; urgency=medium
https://github.com/proxmox/qemu-server/commit/29ea3d0c10b2cd8b426a0a2f8f4dd5c90929be39

You will likely need qemu-server 9.1.4 or later.

edit: It seems it will be added to PVE8 via backport at some point...

• uzumo