Secure boot does not require a TPM module and is part of the UEFI firmware standard.
Check out this VMware doc link
UEFI Secure Boot for ESXi Hosts (vmware.com)
