Secure Boot has been enabled on this generation 2 guest virtual machine. This occurs when a VM has been cloned from a VHDX file using default options of ‘gen2’ para-virtual hardware.
Edit the VM’s setting to remove the check-mark next to ‘Enable secure boot’
Alternatively, run this PowerShell command as Admininistrator:
Set-VMFirmware -VMName $newVmName -DisableSecureBoot