<![CDATA[XCP-ng 8.2.1 Guest UEFI Secure Boot]]>I've been searching but not found a solution for this problem so far. After setting up two hosts and successfully connecting them to my Synology iSCSI storage with Multipathing enabled I tried to configure my first Windows Server 2022 VM. On enabling Secure Boot I was presented with the message 'This pool has not yet been setup for Guest UEFI Secure Boot.'

I then ran the required command on the host and noted the output.

secureboot-certs install default default default latest

Successfully installed certificates to the XAPI DB for pool.

After this I tried adding the VM again but get the same message. Restarting the hosts didn't resolve the problem either.

secureboot-certs report

secureboot-certs -- Report
Certificate Info for pool: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx):
Certificates (4): PK.auth, KEK.auth, db.auth, dbx.auth

Certificate: PK.auth
Auth file md5: 3ebe3795a5950e68b66292a6c0181742
Certificate: KEK.auth
Auth file md5: 51ad99ebf87c5e68530af5d0d373b4a3
Certificate: db.auth
Auth file md5: bfe27c2a9d5f6a5adc5c0228f91fcc13
Certificate: dbx.auth
Auth file md5: 321878c31426dcf1988a2834c88a291

Everything looks as though it's set up correctly but am I missing a step?

]]>https://xcp-ng.org/forum/topic/9622/xcp-ng-8-2-1-guest-uefi-secure-bootRSS for NodeTue, 12 May 2026 00:08:37 GMTWed, 11 Sep 2024 17:23:18 GMT60<![CDATA[Reply to XCP-ng 8.2.1 Guest UEFI Secure Boot on Fri, 13 Sep 2024 13:20:18 GMT]]>I see that the bug is actually already fixed on the latest version (5.98.1).

]]>https://xcp-ng.org/forum/post/82615https://xcp-ng.org/forum/post/82615Fri, 13 Sep 2024 13:20:18 GMT<![CDATA[Reply to XCP-ng 8.2.1 Guest UEFI Secure Boot on Fri, 13 Sep 2024 08:12:40 GMT]]>Hi @TwoPlus1, thanks for the report. I can reproduce the bug. We will fix this for the next release (5.99)`

]]>https://xcp-ng.org/forum/post/82602https://xcp-ng.org/forum/post/82602Fri, 13 Sep 2024 08:12:40 GMT<![CDATA[Reply to XCP-ng 8.2.1 Guest UEFI Secure Boot on Thu, 12 Sep 2024 09:39:09 GMT]]>I pinged the XO team too 🙂

]]>https://xcp-ng.org/forum/post/82573https://xcp-ng.org/forum/post/82573Thu, 12 Sep 2024 09:39:09 GMT<![CDATA[Reply to XCP-ng 8.2.1 Guest UEFI Secure Boot on Thu, 12 Sep 2024 09:20:25 GMT]]>So it's a regression, pinging @MathieuRA to go deeper (or to select someone to do so)

]]>https://xcp-ng.org/forum/post/82572https://xcp-ng.org/forum/post/82572Thu, 12 Sep 2024 09:20:25 GMT<![CDATA[Reply to XCP-ng 8.2.1 Guest UEFI Secure Boot on Thu, 12 Sep 2024 08:46:27 GMT]]>Since the feature in which I suspect a bug was introduced in recent versions of XO only, this would seem logical (depending on what version XOA deploys initially).

]]>https://xcp-ng.org/forum/post/82570https://xcp-ng.org/forum/post/82570Thu, 12 Sep 2024 08:46:27 GMT<![CDATA[Reply to XCP-ng 8.2.1 Guest UEFI Secure Boot on Thu, 12 Sep 2024 08:38:46 GMT]]>@olivierlambert Yes, with all updates requireing registration but not the trial. Deploying a new XOA without any updates resolved the problem.

]]>https://xcp-ng.org/forum/post/82569https://xcp-ng.org/forum/post/82569Thu, 12 Sep 2024 08:38:46 GMT<![CDATA[Reply to XCP-ng 8.2.1 Guest UEFI Secure Boot on Thu, 12 Sep 2024 07:11:23 GMT]]>I'm not sure to get it, so on a XOA full up to date you have the issue?

]]>https://xcp-ng.org/forum/post/82564https://xcp-ng.org/forum/post/82564Thu, 12 Sep 2024 07:11:23 GMT<![CDATA[Reply to XCP-ng 8.2.1 Guest UEFI Secure Boot on Wed, 11 Sep 2024 19:40:01 GMT]]>@stormi
Deploying a new unpatched XOA resolved the problem.

]]>https://xcp-ng.org/forum/post/82553https://xcp-ng.org/forum/post/82553Wed, 11 Sep 2024 19:40:01 GMT<![CDATA[Reply to XCP-ng 8.2.1 Guest UEFI Secure Boot on Wed, 11 Sep 2024 19:24:27 GMT]]>Thanks, I deployed XOA, registered and fully updated it before building my first VM. I'll try deploying another instance and see if that resolves it.

]]>https://xcp-ng.org/forum/post/82550https://xcp-ng.org/forum/post/82550Wed, 11 Sep 2024 19:24:27 GMT<![CDATA[Reply to XCP-ng 8.2.1 Guest UEFI Secure Boot on Wed, 11 Sep 2024 17:49:12 GMT]]>This message is not supposed to be displayed for XCP-ng 8.2 pools. If it is, then it's a Xen Orchestra bug.

]]>https://xcp-ng.org/forum/post/82536https://xcp-ng.org/forum/post/82536Wed, 11 Sep 2024 17:49:12 GMT<![CDATA[Reply to XCP-ng 8.2.1 Guest UEFI Secure Boot on Wed, 11 Sep 2024 17:29:55 GMT]]>Ping @yann or @stormi

]]>https://xcp-ng.org/forum/post/82533https://xcp-ng.org/forum/post/82533Wed, 11 Sep 2024 17:29:55 GMT