Recent content by Capricornus

In Post #1736 I posted that I could not get my HP Z440 workstation to revoke, as I got an error. Today, having read this article Windows 11's Secure Boot 2023 updates are failing across some PCs, exposing a wider firmware problem what caught my attention in the article was this part: Some ASUS...

Hazel123: the secure boot is on in the bios. It just shows up in another part of the bios, and I did not take a picture of that. Everything went well, just an error when trying to revoke the old certs. And I am trying to solve that error. I have had my machine running with Optional diagnostics...

Concerning my HP Z440 workstation: Looking at the document L49253-001 from HP, labelled HP Sure Start Technical white paper, it states that the entry for Sure Start can be found in the UEFI under Security. I have no entry there for Sure Start nor anywhere else in the BIOS. So I am pretty...

Looking at this link https://support.hp.com/us-en/document/ish_9642671-9641393-16 my HP Z440 workstation is not on the list of HP machines with Sure Start security. So, something else seems to be going on. Before I ran your scripts on the Z440, the device security in the settings of win 11 did...

Meanwhile I checked on my very old Lenovo C340 all-in-one with the UEFI from 2012, and there too the same command (version 2026-5-8 I believe) had run without problem. So, there seems to be a problem with this HP Z440.

Having updated my HP Z440 workstation, today I wanted to revoke the 2011 cert. I ran .\Update_UEFI-CA2023.ps1 -Revoke (running version 5-14) But that fails with this error: Error: failed to append "DBXUpdate2024.bin" to UEFI DBX When I ran the same command on the one machine that got an...

I would like to give some feedback on updating my older HP Z440 workstation: I first had to remove the bios admin password by removing a jumper at position E49 on the mainboard. The manual says it is a blue jumper, but it looks green to me, especially when holding it up to natural light. That...

I would like to update the secure boot certificates of an older HP Z440 workstation. It has a bios password on it, and the password can only be removed by removing a jumper on the mainboard. So a pain in the neck. Do I need to remove the password first for those scripts to work? I assume so, but...

Thank you very much for those scripts. It allowed me to put the new secure boot certificates on an old Lenovo C340 All-in-One computer (with a UEFI from 2012). All previous attempts with other scripts had failed.