[VMC on AWS] Windows Server 2022 fails to boot with Secure Boot enabled

Products

• VMware Cloud on AWS

Issue/Introduction

To provide VMC specific guidance for addressing the Secure Boot issue and Windows Server 2022.
The general vSphere KB can be found here: KB 90947.

Symptoms:

Windows Server 2022 guest OS may fail to boot on SDDC versions prior to M20.

This is specifically seen after update KB5022842 (OS Build 20348.1547)
 

Resolution

KB5023705, on March 14, 2023, update from Microsoft has resolved the issue with Windows 2022.It is recommend to test this update on the affected VMs. 

Alternatively, you can schedule an upgrade to 1.18v12.

Workaround:
In the event you cannot implement either of the above resolution, the options are:

1. Refrain from installing the KB5022842 patch on any Windows 2022 Server virtual machine.  
2. If the you have already applied the Windows update and is now unable to boot, then they can either:                         a) restore a previous backup, or                                                                                                                             b) try disabling Secure Boot (create a snapshot first in case they need to evert).
3. If the Windows update is not installed, but there is a requirement to do so ASAP, then they should consider first disabling Secure Boot.

Additional Information

https://docs.vmware.com/en/VMware-Cloud-on-AWS/services/com.vmware.vsphere.vmc-aws-manage-data-center-vms.doc/GUID-5ED3C460-9E84-4E12-90CF-48EB9EDDCDD6.html

Impact/Risks:
SDDCs prior to 1.20 are impacted.
1.20 is not impacted.