However if I don't have that USB connected, the VM only offers me the choice of an EFI Shell or the NVME drive to boot from.

Microsoft has released a new PowerShell script for updating the Windows 11 /10 and Server bootable media for the latest UEFI Secure Boot certificate.

Here’s a cool resource for PowerShell newbies (and who these days isn’t at least dabbling with Microsoft’s young scripting language?): the Get-Scripting podcast. The podcast is up to Episode ...