UEFI Secure Boot and OVAs

My experience with OVF/OVA is regrettably little.  Are you using a version of ovftool which corresponds with your ESXi and vSphere versions?  (That’s about all I can think of on the OVF side of things…)

I can say though that the NVRAM is an important part of any EFI VM, and particularly so when Secure Boot is enabled.  I have not tried deleting the NVRAM for a Linux guest booting through the Linux guest Secure Boot shim, but a security violation screen is probably what I would expect to see until the guest has the opportunity to reconfigure its Secure Boot shim.

—

Darius