[pve-devel] [PATCH manager v2 9/9] ui: qemu: hardware: efi: use 2023w value when enrolling certs

Fiona Ebner f.ebner at proxmox.com
Tue Jan 13 11:54:23 CET 2026


Also detect drives with 'ms-cert=2023' as still needing enrollment,
because they do not yet include the 'Windows UEFI CA 2023' certificate
(only the 'Microsoft UEFI CA 2023' certificate).

Signed-off-by: Fiona Ebner <f.ebner at proxmox.com>
---

New in v2.

 www/manager6/qemu/HardwareView.js | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/www/manager6/qemu/HardwareView.js b/www/manager6/qemu/HardwareView.js
index 69216932..2c506ab8 100644
--- a/www/manager6/qemu/HardwareView.js
+++ b/www/manager6/qemu/HardwareView.js
@@ -449,7 +449,7 @@ Ext.define('PVE.qemu.HardwareView', {
             }
 
             let efidisk = PVE.Parser.parsePropertyString(rec.data.value, 'file');
-            efidisk['ms-cert'] = '2023';
+            efidisk['ms-cert'] = '2023w';
 
             let params = {};
             params[rec.data.key] = PVE.Parser.printPropertyString(efidisk);
@@ -761,7 +761,7 @@ Ext.define('PVE.qemu.HardwareView', {
                     !pending &&
                     isWin10or11 &&
                     PVE.Parser.parseBoolean(drive['pre-enrolled-keys'], false) &&
-                    drive['ms-cert'] !== '2023';
+                    drive['ms-cert'] !== '2023w';
             }
 
             edit_btn.setDisabled(
-- 
2.47.3





More information about the pve-devel mailing list