Hi,
I managed to get PVE 7.x working with Secure Boot enabled without problems. I even automated the kernel signing after each upgrade/change.
The problem, though, is that I can't manage to find if PVE's Qemu is complied with SMM enabled or disabled. I need that information.
After that, why...