Recent content by goink

@garlin One more thing. We started with (from my Log): REQUIRED ACTION =============== To revoke the [PCA 2011] cert, run the commands, run the commands: manage-bde -Protectors -Disable C: -RebootCount 1 reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Secureboot /v...

@garlin Thank you for your swift responses! I read that running "powershell -ep bypass -f .\Update_UEFI-CA2023.ps1 -revoke" will do everything and clear the issues.

OK. I see, "powershell -ep bypass -f" bypasses the PS Execution Policy enforcement limitation. I should have known this.

@garin What does "powershell -ep bypass -f" do? and Do I need to run " install SkuSiPolicy.p7b" - is it run before or after "powershell -ep bypass -f .\Update_UEFI-CA2023.ps1 -revoke"? Or is this taken care of by running "powershell -ep bypass -f .\Update_UEFI-CA2023.ps1 -revoke"? And all...

@garlin Thanks for the magnificent work. I ran the Windows 11 "Secure Boot Allowed Key Exchange Key (KEK) Update"; however, after several reboots, I still seem to be on the 2011 cert. I ran your "Check_UEFI-CA2023.ps1" script and generated a log. It appears there are some issues on my...

I tried using Rufus 4.6 to perform an in-place upgrade (keeping files, etc.) of an older licensed Win 10 AMD desktop machine - no TPM - to Win 11. It didn't work. I was never presented with the keep apps and files options. It behaved as if a new, fresh install and asked for a new Win 11 license...