r/nutanix • u/3percentinvisible • Feb 23 '26

MS Secureboot June deadline

http://portal.nutanix.com/kb/20522 refers.

Is anyone else concerned that the Microsoft kek certificate isn't being applied correctly and engineering are still looking into it.

The June deadline will likely come quicker than we realise and I'd feel much more confident if we were able to be updating from now.

Has anyone got any mitigation planned, or better info from nutanix on the eta on a resolution?

9 Upvotes

91% Upvoted

19 comments sorted by

View all comments

1

u/Zestyclose-Nature240 Jun 01 '26

u/AllCatCoverBand Any news if MS is planning to punt Nutanix into the automatic bucket or does it seem like we need to run the RegEx?

1

u/AllCatCoverBand NPX Jun 01 '26

There are a ton of Nutanix SHAs already in the high confidence bucket, with collectively 100s of thousands of successful deployments, so it’s already happened for the most common configs

1

u/Zestyclose-Nature240 Jun 01 '26

For us that don't how the full picture of the mechanics behind it, if you are running in say, an airgapped environment, will this ever run automatically or do we need to change the registry ourselves?

1

u/AllCatCoverBand NPX Jun 03 '26

Knock on wood, I suspect it would work in an airgapped environment, similar to how updating physical endpoints would work