VMs with SecureBoot enabled can currently not be migrated automatically, because SB would prevent the from booting on the destination.

The current workaround is to disable SB on the source side, and re-enable it on the destination side.
i.e. for windows it's described here https://learn.microsoft.com/en-us/windows-hardware/manufacture/desktop/disabling-secure-boot?view=windows-11