confidential vms

The confidential vms tag covers Microsoft Azure guidance on protecting Linux virtual machines with Trusted Launch and Secure Boot. Current coverage focuses on Secure Boot 2023 database and KEK certificate updates ahead of the planned expiration of older Microsoft Secure Boot certificates in June 2026. It also explains the operational impact for affected Linux Confidential VMs: while many systems may continue booting, those that retain the old trust chain could miss future bootloader protections, shim updates, and certificate revocations. In some cases, updating the trust configuration is not enough and the Confidential VM must be recreated to apply the required certificate changes.