> For the complete documentation index, see [llms.txt](https://docs.verge.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.verge.io/knowledge-base/virtual-machines/sonicwall-nsv-boot-failure-signed-firmware.md).

# SonicWall NSv 7.1.1+ Will Not Boot on VergeOS

SonicWall NSv virtual firewalls on SonicOS 7.1.1 and later do not currently boot after import into VergeOS. This article explains why the appliance fails to start and what your options are in the meantime.

{% hint style="info" %}
**Support coming in Q3 2026**

VergeOS will add support for custom EFI firmware in Q3 2026. This will allow the SonicWall NSv appliance to boot on VergeOS. Until that support ships, use one of the alternatives described below.
{% endhint %}

## Symptoms

* You import a SonicWall NSv appliance into VergeOS and it fails to boot.
* The console shows a firmware validation error such as `Invalid firmware detected`.
* The failure is the same no matter which source format you import from — KVM/QCOW2, VMware OVA, or Hyper-V VHDX.

## Overview

SonicWall ships the NSv image with its own custom OVMF firmware files — `OVMF_CODE.sw.fd` and `OVMF_VARS.sw.fd` — that carry SonicWall-specific Secure Boot certificates. At boot, SonicCoreX checks that it is running on exactly that firmware and aborts on anything else.

VergeOS builds and manages each VM's UEFI variable disk from standard OVMF templates. There is currently no supported way to swap the EFI disk's media source through the UI or API. The appliance cannot see SonicWall's custom firmware files, so its boot-time firmware check fails and the NSv does not start.

{% hint style="info" %}
**Why every import format fails the same way**

The block is in the appliance's firmware validation, not in any one disk format. Converting or re-importing the image — QCOW2, OVA, or VHDX — does not change the outcome, because none of those paths supply SonicWall's signed `.fd` firmware.
{% endhint %}

{% hint style="info" %}
**Applies to SonicOS 7.1.1 and later**

Earlier SonicOS builds that did not enforce the signed-firmware check are not affected in the same way. The behavior described here is specific to NSv on 7.1.1+.
{% endhint %}

## Options in the Meantime

Any virtual firewall that boots on standard UEFI firmware runs well on VergeOS, as a VM or inside a tenant. It can fill the role until NSv support arrives.

If you want to stay on SonicWall today, run the firewall on physical SonicWall hardware and connect it to your VergeOS environment over the network.

{% hint style="info" %}
**Need Help?**

If you are planning a firewall migration into VergeOS and want to talk through options, contact the VergeOS support team.
{% endhint %}


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.verge.io/knowledge-base/virtual-machines/sonicwall-nsv-boot-failure-signed-firmware.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.