The Microsoft 2011 Secure Boot certificates expire in June 2026. Replacement certificates were generated in 2023, however there are some challenges getting these in to varstored (the UEFI variable storage daemon used by the xapi toolstack), due to prior design decisions.
The intent of this session is to give a quick summary of the issues, and outline changes we (XenServer) have made (or are in the process of making) to deal with them, and discuss any other comments / issues in this area.