[pve-devel] [PATCH v2 qemu-server 1/1] fix #6985: ovmf: auto-enroll Microsoft UEFI CA 2023 for Windows

[Thomas Lamprecht]

On Fri, 14 Nov 2025 12:59:17 +0100, Fiona Ebner wrote:
> Microsoft's UEFI CA 2011 will expire in June 2026. It's necessary to
> ensure that the new UEFI CA 2023 is enrolled for Windows to keep
> updates working.
> 
> pve-edk2-firmware >= 4.2025.05-1 includes the 2023 certificate
> already, so new disks are fine. Still, check during EFI disk creation
> what is actually there, since there is no guarantee that a new enough
> version of pve-edk2-firmware is installed.
> 
> [...]

Applied, thanks!

[1/1] fix #6985: ovmf: auto-enroll Microsoft UEFI CA 2023 for Windows
      commit: c5b3a3146c1f6286f8f000074d11c21b60dc61ef