ISOs are unable to boot with Secure Boot enabled on domain controllers running on physical servers.
Further research is required to improve support for physical hardware configurations that cover different Secure Boot use cases.
WORKAROUND:
None
STATUS
Enhancement ID - 583565. The enhancement has been submitted to Development for consideration in a future release of the product.