Microsoft certificates for Secure Boot expire in June 2026

Already updated in AHV 10.3.1. You can find more info at:

http://portal.nutanix.com/kb/20522

There is no answer to my question in the KB. It only specifies what needs to be done for VMs with Uefi deployed on AHV.

The question is how this will affect AHV and CVM? Do they need to be updated separately?
If I remember correctly, AHV and CVM don't use UEFI. Therefore, there's no need to do anything with them or the host.

Stop using legacy BIOS.  

What worries me is this statement in the KB--->

Note: As of today, you cannot apply the Microsoft KEK 2K CA to AHV VMs with UEFI running Windows guests utilizing Windows Update.  Nutanix Engineering is working on a solution for this matter.