Virtual Image Advanced Options 2

[dya]

About virtual image option settings.

-----------------------------------------
Pattern 1
■Is the VIRTIO driver loaded?
■UEFI
□vTPM Enabled
□Secure Boot

Simply checking UEFI enables vTPM.
When checking with virsh dumpxml, the following settings are configured.
Why is this?
<tpm model='tpm-tis'>
<backend type='emulator' version='2.0'/>
<alias name='tpm0'/>
</tpm>
------------------------------------------

------------------------------------------
Pattern 2
■Is the VIRTIO driver loaded?
■UEFI
■vTPM Enabled
■Secure Boot

Even when "vTPM Enabled" is checked, no change is observed in the virsh dumpxml. Is there any difference between checking it and not?

Checking "Secure Boot" does not change anything below, and
the OS also recognizes Secure Boot as disabled.
I think this is because /var/morpheus/kvm/OVMF_MVM.fd does not support Secure Boot, but is that correct?

<os>
<type arch='x86_64' machine='pc-q35-8.2'>hvm</type>
<loader readonly='yes' secure='yes' type='pflash'>/var/morpheus/kvm/OVMF_MVM.fd</loader>
<nvram template='/var/morpheus/kvm/OVMF_VARS.fd'>/var/lib/libvirt/qemu/nvram/tmp-win11_VARS.fd</nvram>
<bootmenu enable='no'/>
<smbios mode='sysinfo'/>
</os>

------------------------------------------

This is a machine translation, so I apologize if it's difficult to understand.

[Arnout_Verbeken]

Secure Boot is indeed not yet fully implemented.
Checking for your other questions.