In an OS that supports UEFI Secure Boot, each piece of boot software is signed, including the bootloader, the OS kernel, and OS drivers. VM Secure Boot has some essential requirements:
- Virtual hardware version 13 or later
- EFI firmware in the VM boot options
- Guest OS that supports UEFI Secure Boot
Some examples of a supported OS are Windows 8 and Windows Server 2012 or newer, VMware ESXi 6.5 and Photon OS, RHEL/Centos 7.0, and Ubuntu 14.04.
You can enable Secure Boot using the vSphere Web Client in the VM Options section of the selected VM: