u/YANSAacct

So there are 2 VMWare articles I've been looking over, but I'm still a little confused:

• https://knowledge.broadcom.com/external/article/423919/manual-update-of-the-secure-boot-platfor.html
• https://knowledge.broadcom.com/external/article/423893/secure-boot-certificate-expirations-and.html

1. Is the process (if done manually), install PK, reboot, install KEK, done?

2. Do I also need to do something about the DB/dbx cert? Microsoft UEFI CA 2023 and Windows UEFI CA 2023.

3. Do I need to do this on the actual exsi host as well?