pxe efi boot - bdsdxe boot0002 access denied

Hi guys I have VMs which fail to boot with error as per the subject. I suspect this is due to:   <os firmware='efi'>     <type arch='x86_64' machine='pc-q35-rhel9.2.0'>hvm</type>     <firmware>       <feature enabled='yes' name='enrolled-keys'/> <--- HERE       <feature enabled='yes' name='secure-boot'/> <---- HERE ?     </firmware>     <loader readonly='yes' secure='yes' type='pflash'>/usr/share/edk2/ovmf/OVMF_CODE.secboot.fd</loader>     <nvram template='/usr/share/edk2/ovmf/OVMF_VARS.secboot.fd'>/var/lib/libvirt/qemu/nvram/centos-efi_VARS.fd</nvram>     <boot dev='network'/>     <boot dev='hd'/>   </os> Would you have any thoughts on how to fix, to work around it? many thanks, L.