Gen 2 VMs on Windows Server 2012 R2 Hyper-V host not running UEFI
So I’ve finally got my Windows Server 2012 R2 lab up and running (see previous post about why it has taken SOOOOOOO long).
In Windows Server 2012 R2 Microsoft have created Generation 2 Virtual Machines. They are VMs that use a UEFI boot architecture rather than the million year old BIOS variety we’ve been stuck with up until now.
I’m not going to go into details about the changes (there are hundreds of other blog posts about the changes) but basically they’ve changed all the “hardware” the VMs see and it is now no longer based on something from dark ages. The main benefits are:
- Secure boot
- Boot from SCSI
- Faster boot and installation times
The main thing being secure boot aka much more protection from rootkit malware. VM speed is unaffected.
One interesting thing I found today – doesn’t matter what the host is running, BIOS or UEFI, the VM will do what it is told to! So if you’re running hardware that doesn’t support UEFI natively your VMs can still benefit from it. Now all we need is some kind of virtual TPM and we can have some seriously secure VMs… Think Network Unlock for highly virtualised/private cloud infrastructures.