t2s50

You wouldn't change the vbios of the iGPU by this procedure, it's an integrated part of the main firmware. It seems the only way to...

Well, the bootmgrfw.efi file is still the latest available for 'stock'- installations and you're text referes to EFI files and to this...

That was the reason I attached the files, but there's no need, except for KEKUpdateCombined.bin (and BucketConfidenceData.cab) the files...

OK, thanks. I did have a different understanding of "banned" since for a bootmanager to boot it has to be signed with a non revoked cert...

Thanks a lot, this version did run and write the logfile. Sorry for Samsung, don't know if there are many (and newer) firmware...

@t2s50: This version of the check script replaces any characters in the PC's model name which are illegal file characters.

No KEK CA 2023 was installed, so it's probably an unsupported PC. "Phoenix Kek Example" suggests this is a sloppy factory BIOS...

No, that's not correct. It's supported, but the KEK isn't installed yet. As written this is the output exactly after recovering from an...

Old laptop (Samsung NP300E5C, Phoenix P09RAP, HM75, Ivy Bridge) doesn't like the latest DBXUpdate2024.bin (together with latest...

I'm sorry, but I don't understand what MS is doing here. There has to be a meaning that the *2024 files exist, and now there's the...

I don't think so, see registry after last reboot for april updates, 'Available updates' is on 0x4000, but there were some remarks...

For older Powershell versions (5.1 on 2016 server and default on W10) Get-Volume_DevicePath seems not known: Otherwise I'm not...

Thanks a lot! Should've checked myself, Sorry! But I think this might get you some additional questions? Seems that MS didn't update...

Windows 10 ESU has now got the new Secure boot message, too:

I wonder a little bit why your script proposes to revoke the PCA2011 cert while it lists the PCA2011 already in the dbx? (Read the...