Version

7.1.12

Host OS Type

Windows

Host OS name + version

Windows 10 22H2 Build 19045.6216

Host Architecture

x86

Guest OS Type

Windows

Guest Architecture

x86

Guest OS name + version

Windows 11 24H2 Build 26100.4946; Windows 11 25H2 Build 26200.5742

Component

EFI

What happened?

The Windows guest cannot update the DBX, because the variable DBX is not defined.

Update of the DB with the new cert works so far.

How can we reproduce this?

At each restart, the following is logged in the event viewer in the Windows guest

Source: Anbietername: Microsoft-Windows-TPM-WMI
Event ID: 1796
The Secure Boot update failed to update a Secure Boot variable with error access denied.

In PowerShell:

> Get-SecureBootUEFI -Name DBX
> Get-SecureBootUEFI -Name DBX: The variable is currently not defined: 0xC0000100

Did you upload all of your necessary log files, screenshots, etc.?

• Yes, I've uploaded all pertinent files to this issue.