From 2fa1ba5ad28d45a739bcd3dd3a56d631c0d516ad Mon Sep 17 00:00:00 2001
From: Martin Necas <mnecas@redhat.com>
Date: Fri, 13 Dec 2024 17:15:19 +0100
Subject: [PATCH] MTV-1632 | Enable SMM for the uefi secureboot

Signed-off-by: Martin Necas <mnecas@redhat.com>
---
 pkg/controller/plan/adapter/vsphere/builder.go | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/pkg/controller/plan/adapter/vsphere/builder.go b/pkg/controller/plan/adapter/vsphere/builder.go
index e46081aaf..8fb529197 100644
--- a/pkg/controller/plan/adapter/vsphere/builder.go
+++ b/pkg/controller/plan/adapter/vsphere/builder.go
@@ -672,6 +672,11 @@ func (r *Builder) mapFirmware(vm *model.VM, object *cnv.VirtualMachineSpec) {
 			EFI: &cnv.EFI{
 				SecureBoot: &vm.SecureBoot,
 			}}
+		object.Template.Spec.Domain.Features = &cnv.Features{
+			SMM: &cnv.FeatureState{
+				Enabled: &vm.SecureBoot,
+			},
+		}
 	default:
 		firmware.Bootloader = &cnv.Bootloader{BIOS: &cnv.BIOS{}}
 	}