[SOLVED] Windows 10 guest: Enable Secure Boot after install with old EFI

[Afox]

Hello,

is there a procedure to enable Secure Boot on a Windows 10 guests that have been installed with an old EFI disk?

With my Linux guests removing the EFI disk and replacing it with a "new" 4m disk worked (had to re-add the boot option like described here: https://pve.proxmox.com/wiki/OVMF/UEFI_Boot_Entries) but with Windows guests it does not work that way because Windows is booting into Repair Mode after. It tries to repair but fails and now my question is if there is anything I can/need to do to make this work. I know that on a regular Desktop machine you can enable Secure Boot after install by flipping a switch in the Bios.

Regards,

Afox

 

[Afox]

I solved it myself.
The problem were old virtio-drivers that were not signed and prevented Windows from finding the disk. Solution is to first install up-to-date virtio drivers, then replace the old with the new EFI-disk and finally proceed as described in the link above.