I went back into the BIOS, deleted all the keys, disabled secure boot, and entered Windows to reapply the updates with your script. Check-UEFI now reported no errors updating, showing that the BIOS was in configuration mode.
I applied the Update-UEFI - revoke script and these were the outputs...
Yes, but in your case you revoked the certificates from 2011 and earlier versions, which I didn't do because I don't want to have problems with my backup media. Perhaps by revoking the old certificates, the UEFI will have the signatures that the script expects to read.
I ran the new script and it doesn't seem to have changed the result.
Secure Boot: ON
Virtualization Based Security: OFF
BitLocker on (C:) OFF
UEFI KEK Certs
--------------
Microsoft Corporation KEK CA 2011
Microsoft Corporation KEK 2K CA 2023
UEFI DB Certs
-------------
Microsoft Corporation...
Thank you for the quick response.
The error lines in PS remain, but now it shows other lines, probably more than you need.
PS: I'm using a translator, so there might be grammatical errors.
Secure Boot: ON
Virtualization Based Security: OFF
BitLocker on (C:) OFF
UEFI KEK Certs
--------------...
Hello, it seems the update process was successful, but when I check I get these error lines in DBX, it seems something is broken in the script. SecureBoot-260531