After looking into it a bit more, iPXE has to be compiled with DOWNLOAD_PROTO_HTTPS (which is oddly enough not a default). https://ipxe.org/download#choosing_what_to_build https://ipxe.org/buildcfg/download_proto_https