Secure Boot Hyper-V

ManieyaK_
ManieyaK_ used Ask the Experts™
on
Hello we've got got a bunch of VM's hosted on two server 2016 servers.  All VM's are managed using Hyper-V.  We've got a requirement to enable Secure boot on all connected devices including VM's,  we've got a single VM which we've been able to enable secure boot on.  I've followed the suggestions in the following article, the problem is not all VM's have the Firmware Section & Under Security No Secure Boot just "Encrypt State and virtual machine migration traffic"
https://blogs.technet.microsoft.com/dubaisec/2016/03/29/secure-boot-on-virtual-machines/
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Technical Architect - HA/Compute/Storage
Commented:
The VM must be Generation 2 to support SecureBoot and uEFI GPT partitions on the VHDX file(s). Thus, only operating systems that are supported in a Generation 2 configuration would work.
ManieyaK_CSSP

Author

Commented:
Thank You sir.
ManieyaK_CSSP

Author

Commented:
Is there an easy way to convert gen 1 to gen 2?
Philip ElderTechnical Architect - HA/Compute/Storage

Commented:
If the operating system is supported in a generation 2 VM then there are a number of V2V (Virtual to Virtual) methods and utilities out there.

We tend to use StorageCraft ShadowProtect for this. But, there are others out there.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial