Deactivate or activate execInstalledOnly enforcement on VMware
ESXi hosts with TPM. After execInstalledOnly enforcement is activated, the
VMkernel only performs those binaries that are packaged and signed as part of a VIB.
Steps
Activate UEFI Secure Boot enforcement before you activate the
execInstalledOnly enforcement.