*everything we /put/ in section 3. *sigh*
-
Secure Boot is unrelated, and they probably aren't doing anything directly with it that you're seeing here, though the Secure Boot config variables do get hashed into tpm registers and the log, so it's best if they're the same (incl keyrings) between the two boot methods.
The VM shouldn't have a TPM, so I guess I should turn it off (I used to use it for SSH key storage, but I think I switched everything to a YubiKey by now). I did get the VM config otherwise close enough to the hardware that the licensing doesn't balk (it's an upgraded win7 OEM).
