top of page

ESXi Host and VM Secure Boot Visibility with VCF Operations

  • Writer: Brock Peterson
    Brock Peterson
  • 2 hours ago
  • 1 min read

I was trying to determine what ESXi Hosts and VMs in my lab had Secure Boot enabled, here's what I did.


A couple caveats before we get started:

  • ESXi Host Secure Boot property isn't available in Operations 8.18.x, it's not available until 9.0. You should confirm it's enabled in the Policy/s.

  • VM EFI Secure Boot property is available in VCF Operations 8.18.x+, but must be enabled in the Policy/s.

  • ESXi Host TPM Version isn't available until VCF Operations 9.0, so you won't see that property until then.

  • I used the vCommunity Management Pack to capture additional properties: VM Boot Delay, Boot Order, Boot Retry, Boot Retry Delay, Enter BIOS Setup.



This will allow you to see quite a bit of information:

  • ESXi Hosts

    • ESXi Version

    • BIOS Version

    • TPM Version

    • Secure Boot Enabled

    • Lockdown Mode

  • VMs

    • VM Hardware Version

    • EFI Secure Boot Enabled

    • Boot Delay

    • Boot Order

    • Boot Retry Enabled

    • Boot Retry Detail

    • Enter BIOS Setup

    • Network Boot Protocol


If you'd like this Dashboard (and Views) you can get them here, enjoy!





    bottom of page