From e5d41db5feb9fe0c0f28eb9af54fe193b88d6344 Mon Sep 17 00:00:00 2001
From: xel-arjona <shell_ramix@hotmail.com>
Date: Sat, 8 Aug 2026 08:39:47 -0600
Subject: [PATCH] windows: preserve Secure Boot request on ARM64 guests

---
 quickemu | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/quickemu b/quickemu
index 0ef0394..9da74ee 100755
--- a/quickemu
+++ b/quickemu
@@ -973,10 +973,10 @@ function configure_bios() {
                 # This firmware is passed with -bios and does not use persistent
                 # pflash variable storage.
                 if [ "${guest_os}" == "windows" ] &&
+                   [ "${secureboot}" != "on" ] &&
                    [ -e "${SHARE_PATH}/edk2/aarch64/QEMU_EFI.fd" ]; then
                     EFI_CODE="${SHARE_PATH}/edk2/aarch64/QEMU_EFI.fd"
                     EFI_MODE="bios"
-                    secureboot="off"
                 else
                     # AAVMF firmware paths for ARM64 guests using persistent pflash.
                     # shellcheck disable=SC2054,SC2140