cannot update Secure Boot 2011 certificates in a debian vm with security level Trusted Launch

Hello **Luca Bizzaro

**To better understand why the Secure Boot certificate update is not completing on your Debian Trusted Launch VM, could you please provide:

1. The exact steps/commands you are using to perform the update.
2. The complete error message or log output observed during the failure.
3. The Debian version currently running on the VM.
4. Confirmation that the VM is using Trusted Launch with Secure Boot enabled.
5. Whether the VM was originally created before or after April 2024.

Please note that Trusted Launch VMs created after April 2024 typically already include the Secure Boot 2023 certificates and may not require the same update process as older VMs. Additionally, Linux Secure Boot updates are performed from within the guest operating system and follow the Linux distribution vendor guidance. Debian-specific Secure Boot certificate updates should be validated using the Debian Secure Boot CA transition guidance. Secure Boot certificate updates for Linux on Azure virtual machines - Microsoft Support

Once we receive the error details and VM information, we can determine whether:

• The VM already contains the Secure Boot 2023 certificates,
• There is a Debian shim/bootloader update issue,
• Or there is a Secure Boot compatibility problem preventing the update from completing. 

Thank you.