[PATCH qemu-server 1/2] start vm: check efi vars: clarify when to run the commands for BitLocker

[Fiona Ebner <f.ebner@proxmox.com>]

In the UI and in the docs, it is already mentioned that disabling the
protectors needs to happen before enrollment. Also mention it for the
informational message during VM start.

Suggested-by: Maximiliano Sandoval <m.sandoval@proxmox.com>
Signed-off-by: Fiona Ebner <f.ebner@proxmox.com>
---
 src/PVE/QemuServer.pm | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/src/PVE/QemuServer.pm b/src/PVE/QemuServer.pm
index 09e7a19b..33be0b36 100644
--- a/src/PVE/QemuServer.pm
+++ b/src/PVE/QemuServer.pm
@@ -5416,6 +5416,8 @@ my sub check_efi_vars {
         print "For Windows with BitLocker, run the following command inside Powershell:\n";
         print "  manage-bde -protectors -disable <drive>\n";
         print "for each drive with BitLocker (for example, <drive> could be 'C:').\n";
+        print "This is required for each drive with BitLocker before proceeding with enrollment.\n";
+        print "Otherwise, you will be prompted for the BitLocker recovery key on the next boot.\n";
     }
 
     return;
-- 
2.47.3