Inquiry about inclusion of new Microsoft Secure Boot certificate in EFI Disk

[roger cheng]

Hi,

We’ve been informed that the current Windows Secure Boot certificate will expire in 2026:
https://support.microsoft.com/en-us...-updates-7ff40d33-95dc-4c3c-8725-a9b95457578e


According to the Proxmox documentation:
https://pve-dvm.itsc.cuhk.edu.hk:8006/pve-docs/chapter-qm.html#qm_bios_and_uefi

“...pre-enroll-keys specifies if the efidisk should come pre-loaded with distribution-specific and Microsoft Standard Secure Boot keys.”

However, after testing, it seems that the latest Microsoft Secure Boot certificate is not yet included in the EFI Disk (please see attached screenshots).


May I know if the new Microsoft Secure Boot certificate will be added to the EFI Disk in a future Proxmox update, and if so, when this update is expected?


Thank you.

 

[janus57]

Hi,

Seems related to : https://forum.proxmox.com/threads/s...-certificate-not-included-in-efi-disk.173417/

Best regards,