Windows Server 2025（Hyper-V）跑 PVE 虚拟机,安装Windows无法运行。
提示

EFI disk without 'ms-cert=2023' option, suggesting that the Microsoft UEFI 2023 certificate is not enrolled yet. The UEFI 2011 certificate expires in June 2026!
While the VM is shut down, run 'qm enroll-efi-keys 100' to enroll it.
If the VM uses BitLocker, run the following command inside Windows Powershell:
  manage-bde -protectors -disable <drive>
for each drive with BitLocker (for example, <drive> could be 'C:').
TASK ERROR: KVM virtualisation configured, but not available. Either disable in VM configuration or enable in BIOS.

管理员 PowerShell 执行

Get-VM

开启 CPU 虚拟化嵌套透传

Set-VMProcessor -VMName "改成虚拟机名字" -ExposeVirtualizationExtensions $true

进入 PVE 终端验证虚拟化是否透传成功

egrep -c vmx /proc/cpuinfo

返回 ≥1：虚拟化正常，可启动 VM101
返回 0：透传未生效