Configure Multiple Security Settings on the ESXi Hosts by Using the ESXi Shell
Last Updated January 22, 2025

You activate secure boot on all the ESXi hosts.
You perform the procedure from an ESXi Shell session connected to the ESXi host and on all ESXi hosts in the respective workload domain.
  1. Log in to an ESXi host by using ESXi Shell as
    root
    .​
  2. VMW-ESXI-01108
    Activate secure boot on the host.
    /usr/lib/vmware/secureboot/bin/secureBoot.py -c
    If the output indicates that secure boot cannot be activated, correct the discrepancies and try again. Once all discrepancies are resolved, the server ESXi is installed on can be updated to enable Secure Boot in the firmware.
    To enable Secure Boot in the server's firmware, follow the instructions for the specific manufacturer.
  3. Perform the procedure on the remaining hosts in the current and any other workload domains.