VMWare and Windows Server 2022 February 2023 Updates Secure Boot Issue

[free780]

Multiple reports of VMs failing to boot after this months updates. Issues seems to be related to Secure Boot.

 

 

https://www.borncity.com/blog/2023/02/15/patchday-windows-11-server-2022-updates-14-februar-2023/#comment-142437

 

I'd hold off on patching Server 2022 VMs.

 

 

 

 

 

 

 

[FN-GM]

Thanks for posting. We are just about to start patching so you have saved us some time here. Thanks again.

[free780]

Official KB from VMWare

 

https://kb.vmware.com/s/article/90947

[free780]

MS have acknowledged the issue.

 

https://learn.microsoft.com/en-us/windows/release-health/status-windows-server-2022

[free780]

Looks like VMs missing this certificate fromt he UEFi firmware have the boot issue.

 

 

738A962BD9C81B727717AF17EE093FE9B4BAEEC0 CN=VMware Secure Boot Signing, O="VMware, Inc.", L=Palo Alto, S=California, C=US

 

You can detect this by installing the UEFIv2 Power Module.

 

Install-Module UEFIv2 -Verbose

 

Get-UEFISecureBootCerts | Where-Object -Property signatureSubject -like "*boot*" | Select-Object -ExpandProperty Signature

 

If the cert is present the Feb 2023 update will work. If not you may encounter the boot failure and have to disable secure boot.

[free780]

VMWare have posted an update.

 

https://docs.vmware.com/en/VMware-vSphere/7.0/rn/vsphere-esxi-70u3k-release-notes.html

[FN-GM]

VMWare have posted an update.

 

https://docs.vmware.com/en/VMware-vSphere/7.0/rn/vsphere-esxi-70u3k-release-notes.html

 

This just gets better. Purple screen of death after installation!