Recent content by misar

Thanks but TBH I am totally confused by your description and the subsequent discussion. I think before moving ahead I need to spend time studying the scripts and garlin's detailed notes but it would also help if you could post your copy of the script output. One question, does your BIOS have an...

Tried the suggestion but the BIOS interface was unchanged after rebooting. Re Garlin's suggestion a supervisor password had to be set before anything important in the BIOS could be changed.

As I said previously, the Acer InsydeH20 interface on my laptops has no option to manage keys or "enroll a file". It seems that the only likely option I could find ("users may select all available .efi in FAT32 partitions and add the .efi hash into secure DB") is intended to add a new boot...

Ran the script but same KEK problem as before. It seems Acer have not obliged. Very annoying because I have a really old Lenovo stuck on Windows 10 and the extended security automatic update worked perfectly. PS D:\Install\SecureBoot-CA-2023-Updates\SecureBoot-CA-2023-Updates.v2026.05.27>...

Thanks. I updated the BIOS to v1.10 and it appears unchanged with the same cert update command that I noted in #1981. What do you suggest as next step? I could wait to see what Windows Update does in due course or should I now run your automatic update script?

I previously did several checks and all the 2023 certs are present except KEK. Here is the output from Check-UEFI.bat -Verbose Windows 11 25H2 (26200.8457) Secure Boot: ON Virtualization Based Security: ON BitLocker on (C:) OFF BIOS Firmware ------------- Acer Swift SFA16-41...

One of the laptops is less than two years old so I would have thought Acer/Insyde need to do something. I'm rather nervous with Case 4 so will wait until the old certs actually expire and only then if necessary resort to deleting all keys. Thanks again for the advice and your very fast response.

I looked again at the BIOS and the help notes say "users may select all available .efi in FAT32 partitions and add the .efi hash into secure DB". I assume that is why the .der file is not listed. Does that mean the manual part of Case 3 will still fail? There is no other option to add a cert.

Thanks for the very quick reply. I have reposted as suggested. Re the folder, the option is "Select an UEFI file as trusted for executing". When I do that it lists HDD0 and hitting enter again appears to select <EFI>. That has a list of folders but no files.

(Repost from another thread) I have two Acer laptops running 25H2 and with the InsydeH20 UEFI BIOS. Windows update did a partial certificate update but failed as the new KEK has not been provided by the OEM. Using garlin's manual suggestion I copied "microsoft corporation kek 2k ca 2023.der" to...

I have two Acer laptops running 25H2 and with the InsydeH20 UEFI BIOS. Windows update did a partial certificate update but failed as the new KEK has not been provided by the OEM. Using garlin's manual suggestion I copied "microsoft corporation kek 2k ca 2023.der" to the EFI folder. The BIOS...