update VM 100: -efidisk0 efitype=4m,file=dir:100/vm-100-disk-0.qcow2,ms-cert=2023k,pre-enrolled-keys=1,size=528K
efidisk0: enrolling Microsoft UEFI CA 2023
INFO: reading raw edk2 varstore from /var/run/qemu-server/qsd-vm-100-efi-enroll-efidisk0-enroll.fuse
INFO: var store range: 0x64 -> 0x40000
/usr/lib/python3/site-packages/virt/firmware/efi/siglist.py:58: CryptographyDeprecationWarning: Parsed a serial number which wasn't positive (i.e., it was negative or zero), which is disallowed by RFC 5280. Loading this certificate will cause an exception in a future release of cryptography.
  self.x509 = x509.load_der_x509_certificate(data, default_backend())
INFO: add db cert /usr/lib/python3/site-packages/virt/firmware/certs/microsoft.com/ms-uefi-2011.pem
INFO: certificate already present, skipping
INFO: add db cert /usr/lib/python3/site-packages/virt/firmware/certs/microsoft.com/ms-uefi-2023.pem
INFO: certificate already present, skipping
INFO: add db cert /usr/lib/python3/site-packages/virt/firmware/certs/microsoft.com/windows-2011.pem
INFO: certificate already present, skipping
INFO: add db cert /usr/lib/python3/site-packages/virt/firmware/certs/microsoft.com/windows-2023.pem
INFO: certificate already present, skipping
INFO: add KEK cert /usr/lib/python3/dist-packages/virt/firmware/certs/MicrosoftCorporationKEK2KCA2023.pem
Traceback (most recent call last):
  File "/bin/virt-fw-vars", line 9, in <module>
    sys.exit(main())
             ~~~~^^
  File "/usr/lib/python3/site-packages/virt/firmware/vars.py", line 309, in main
    varlist.add_cert('KEK', item[0], item[1])
    ~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/lib/python3/site-packages/virt/firmware/efi/efivar.py", line 450, in add_cert
    var.sigdb_add_cert(guids.parse_str(owner), filename)
    ~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/lib/python3/site-packages/virt/firmware/efi/efivar.py", line 243, in sigdb_add_cert
    self.sigdb.add_cert(guid, filename)
    ~~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^
  File "/usr/lib/python3/site-packages/virt/firmware/efi/siglist.py", line 144, in add_cert
    siglist.add_cert(guid, filename)
    ~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^
  File "/usr/lib/python3/site-packages/virt/firmware/efi/siglist.py", line 71, in add_cert
    with open(filename, "rb") as f:
         ~~~~^^^^^^^^^^^^^^^^
FileNotFoundError: [Errno 2] No such file or directory: '/usr/lib/python3/dist-packages/virt/firmware/certs/MicrosoftCorporationKEK2KCA2023.pem'
unable to apply pending change efidisk0 : efidisk0: enrolling Microsoft UEFI CA 2023 failed - command 'virt-fw-vars --inplace /var/run/qemu-server/qsd-vm-100-efi-enroll-efidisk0-enroll.fuse --distro-keys ms-uefi --distro-keys windows --add-kek 77fa9abd-0359-4d32-bd60-28f4e78f784b /usr/lib/python3/dist-packages/virt/firmware/certs/MicrosoftCorporationKEK2KCA2023.pem' failed: exit code 1
TASK ERROR: 400 Parameter verification failed. efidisk0: unable to apply pending change efidisk0 : efidisk0: enrolling Microsoft UEFI CA 2023 failed - command 'virt-fw-vars --inplace /var/run/qemu-server/qsd-vm-100-efi-enroll-efidisk0-enroll.fuse --distro-keys ms-uefi --distro-keys windows --add-kek 77fa9abd-0359-4d32-bd60-28f4e78f784b /usr/lib/python3/dist-packages/virt/firmware/certs/MicrosoftCorporationKEK2KCA2023.pem' failed: exit code 1