vSphere Key Providers and vTPM: Native Key Provider vs External KMS
Native Key Provider vs external KMS vs Trust Authority, how to set up and back up an NKP, how to add a vTPM, and what breaks if you skip the backup.
Category: vSphere
Microsoft Secure Boot Certificate Expiration in vSphere VMs (KB 423893): What to Do in 2026
Microsoft KEK and UEFI CA 2011 expired in June 2026. What it means for vSphere VMs with Secure Boot, and how SilentPK (8.0 U3j) and Capsule PK (9.1.1) fix it.
vRealize Events Missing After Patch or Version Upgrade
vRealize/vROps events stop arriving after a patch or upgrade with an authorization error. How to identify it and fix it by enabling basic authentication.
Critical Security Alert: Update to Fixed Version 8.0 U3d Immediately
CVE-2024-38812 is a CVSS 9.8 vCenter RCE exploited in the wild. Versions before 8.0 U3d and 7.0 U3t are affected: patch steps with software-packages.
vCenter Server 8.0 U2 Issue with Edit Settings Virtual Machine Hardware 9 or older
vCenter 8.0 U2 can't edit settings of powered-on VMs with virtual hardware 9 or older in the vSphere Client. Symptoms, workarounds and resolution.
List of vSphere 8.0 Knowledge base articles and Important Links (89756)
List of Knowledge base articles for vSphere 8.0 – [Main KB] – List of vSphere 8.0 Knowledge base articles and Important Links (89756)
“SECUREBOOT: Image DENIED.” – Virtual Machine with Windows Server 2022 KB5022842 (OS Build 20348.1547) configured with secure boot enabled not booting up (90947)
Windows Server 2022 VMs with Secure Boot fail to boot with “SECUREBOOT: Image DENIED” after KB5022842. Cause and the fix on ESXi (KB 90947).
“SECUREBOOT: Image DENIED.” – Linux VMs created with Hardware version 20 will fail to start installation when Secure Boot is enabled (88737)
Linux VMs created with hardware version 20 fail to start installation with Secure Boot enabled: “SECUREBOOT: Image DENIED” (KB 88737) and the fix.
VMworld 2021 – My Top 10 Sessions
My top 10 sessions from the fully virtual VMworld 2021, from Project Monterey onwards.
vRops – Data Retriever is not initialized yet. Please wait … -> Replace expired internal certificate in vRealize Operations (71018)
vROps stuck on “Data Retriever is not initialized yet” or admin login fails? Check for an expired internal certificate and replace it (KB 71018 PAK).