Microsoft Azure Site Recovery Agent failed to install - Error : ASRMobilityServiceBootUEFISecureBootNotSupported

Question

Hi,

I am getting the following error when i am trying to install MASR agent on window server 2012 R2 standard edition.

10:44:40:Writing error info to Output file
10:44:40:The output json file C:\ProgramData\ASRSetupLogs\InstallerErrors.json does not exist
10:44:40:Writing installer errors list to output json file
10:44:40:error_name: ASRMobilityServiceBootUEFISecureBootNotSupported , default_message:
UEFI Secure boot is not supported , error_params:
10:44:40:Exiting main

I have checked the bios mode and it is set to UEFI and when i ran Confirm-SecureBootUEFI in powershell it returned true.

Answer 1

Hello @aman Thank you for contacting us and I apologize for the delayed response!

I’m afraid If you would like to protect the VMware VM by ASR, you have to disable the Secure UEFI. Support matrix doc - https://learn.microsoft.com/en-us/azure/site-recovery/vmware-physical-azure-support-matrix

Further Docs on what’s Secure Boot and how to disable/re-enable it:
https://learn.microsoft.com/en-us/windows-hardware/design/device-experiences/oem-secure-boot [learn.microsoft.com]
https://learn.microsoft.com/en-us/windows-hardware/manufacture/desktop/disabling-secure-boot#disable-secure-boot [learn.microsoft.com]
https://learn.microsoft.com/en-us/windows-hardware/manufacture/desktop/disabling-secure-boot#re-enable-secure-boot [learn.microsoft.com]

---------------------------------------------------------------------------------------------------------------

If the response helped, do "Accept Answer" and up-vote it.

Answer 2

This error can cause confusion... including thoughts of having to change UEFI machines back to BIOS to enable ASR (not the most pleasant of tasks!). UEFI shouldn't really be mentioned as it is supported. Secure Boot is a setting within the UEFI bios menu; having this enabled is not supported with ASR.
For VMware / physical machines:

UEFI + Secure Boot Enabled = not supported
UEFI + Secure boot Disabled = supported

If you are using 'Device Guard' on servers then Secure Boot is required.