Restore the ability to boot your virtual machine after installing Windows Server 2022 security update KB5022842

After installing Windows Server 2022 security update KB5022842, your virtual machine (VM) may fail to boot when using an EFI with Secure Boot.

Important:

At this time, UITS recommends not installing the KB5022842 security update.
Uninstalling the update will not resolve the issue; follow the steps below instead.

If you installed the KB5022842 update and cannot boot your VM, follow these steps to resolve the issue:

Log in to vCenter with your IU VM Admin username. For information on using Two-Step Login (Duo) with vCenter, see Access Intelligent Infrastructure vCenters using Duo.
Use the search at the top of the screen to locate your VM.
In the list on the left, right-click the VM name and select Power - Power Off.
Wait for the VM to power down.
In the list on the left, right-click the VM name and select Edit Settings.
On the VM Options tab, expand Boot Options, uncheck (de-select) Secure Boot, and then select OK.
In the list on the left, right-click the VM name and select Power - Power On.

If the above steps do not resolve your issue, contact the Storage and Virtualization team at sav-request@iu.edu for help. If a production system is affected and needs immediate attention, call Data Center Operations at 812-855-9910 and ask to have a member of the SAV Virtualization team paged.

For more about this issue, see:

Virtual Machine with Windows Server 2022 KB5022842 (OS Build 20348.1547) configured with secure boot enabled not booting up (90947) (VMWare Knowledge Base page)
February 14, 2023—KB5022842 (OS Build 20348.1547) (Microsoft Support page)

To stay informed about potential system maintenance events, join the VMADMIN-L mailing list; for more, see Support resources for IU Intelligent Infrastructure and storage and virtualization.