Hyper-V UEFI Error: The Image’s Hash and Certificate are Not Allowed (DB)

Symptom:

Cause:

Secure Boot has been enabled on this generation 2 guest virtual machine. This occurs when a VM has been cloned from a VHDX file using default options of ‘gen2’ para-virtual hardware.

Resolution:

Edit the VM’s setting to remove the check-mark next to ‘Enable secure boot’

Alternatively, run this PowerShell command as Admininistrator:

Set-VMFirmware -VMName $newVmName -DisableSecureBoot