"Secure Boot CA/keys need to be updated" messages appearing in Windows VM Events

Products

• VMware vCenter Server

Issue/Introduction

Windows VMs show the following errors in Events:

Secure Boot CA/keys need to be updated. This device signature information is included here.
DeviceAttributes: BaseBoardManufacturer:Intel Corporation;FirmwareManufacturer:VMware, Inc.;FirmwareVersion:VMW201.00V.21805430.B64.2305221830;OEMModelNumber:VMware20,1;OEMModelBaseBoard:440BX Desktop Reference Platform;OEMModelSystemFamily:;OEMManufacturerName:VMware, Inc.;OEMModelSKU:;OSArchitecture:amd64;
BucketId: <BUCKET_ID>
BucketConfidenceLevel: 
UpdateType: 0
HResult: The operation completed successfully.

Cause

Windows detected that your Secure Boot keys may need revalidation after the Windows 11 25H2 update.

 

Resolution

No action necessary. Messages can be ignored. It’s just an informational log saying Secure Boot keys were checked.

Additional Information

Error 1801 Telling me to update my Secure Boot CA/Keys