Hyper-V UEFI Error: The Image’s Hash and Certificate are Not Allowed (DB)



Secure Boot has been enabled on this generation 2 guest virtual machine. This occurs when a VM has been cloned from a VHDX file using default options of ‘gen2’ para-virtual hardware.


Edit the VM’s setting to remove the check-mark next to ‘Enable secure boot’

Alternatively, run this PowerShell command as Admininistrator:

Set-VMFirmware -VMName $newVmName -DisableSecureBoot

Leave a Reply

Your email address will not be published. Required fields are marked *