Some progress helping my friend with an Acer Extensa 215-32:
He managed to turn Secure Boot off in the Bios. The Secure Boot Fail then allows the system to Boot.
He ran the Update Script:
Downloading "Microsoft Corporation KEK 2K CA 2023.der" from GitHub.
Copying "Microsoft Corporation KEK 2K CA...
Yes, I think he has one of these, (Extensa 215-32), but the problem is that all the options related to Secure Boot are grayed , (greyed in UK English!), out!
Thanks for your help anyway!
I was wondering if anyone has encountered this problem with an ACER Extensa 215-32 Laptop, using insydeh20 bios:
(I am trying to help a friend who lives in Fiji and I live on France so the time difference is a challenge!)
He has updated his Bios, to V1.23, hoping it would address the CA 2023...
I thought I would share with you a response I received on the Mini PC Forum is response to me pointing out there was no Bios update for an Acemagic S1 Mini PC that I own. I had posted the first part of the CheckUEFI script that showed:
Windows 11 25H2 (26200.8328)
Secure Boot: ON...
I thought that may be the case. I take monthly volume images of each computer, (usually after the Windows Update Cycle), using Terabytes' Image for Windows, which is unusual in that it lets you backup every volume, including System, EFI, Recovery etc. At that time I create a new bootable USB...
Hello Again,
I have run the "new" check scripts on my mini fleet of 5 PCs and Surface Tablets.
They all report they are update in the new Windows Security Device Security Secure Boot Flags.
A consistent thing on all of them is:
Factory Default UEFI DBX Certs
------------------------------...
I thought I would post the following result from the Check_UEFI-CA2023 script on my brother's old Lenovo laptop as it shows that, by doing absolutely nothing, it would appear the Secure Boot Certificates have been updated by Windows Update:
Windows 11 25H2 (26200.8117)
Secure Boot: ON...
Helping a friend with another Nipogi Mini PC, I found that Secure Boot was not enabled. I loaded the BIOS, cleared all the Certificates and put Secure Boot in setup mode. Cannot now login to Windows with his PIN as it has disappeared. It needs to send a code to the email registered to his...
I have a couple of cheap Mini PCs (Acemgic & Nipogi), and, despite the fact that they are both less than 2 years old there is little prospect of the manufacturer(s) updating their AMI based BIOS.
On my Acemagic S1
I have a similar output to GunnzAkimbo except that, after running the Update...
Yes it did.
I will not have this computer after another hour, as its owner is coming to collect it.
Attached are 2 files, showing the results of 2 other checks that also show errors but succeed in parts. I hope they may help. One of them has a partly French output as I piped the output to a...
Achieved the update leaving the Bios alone by the method described in the original Microsoft article:
https://support.microsoft.com/en-us/topic/registry-key-updates-for-secure-boot-windows-devices-with-it-managed-updates-a7be69c9-4634-42e1-9ca1-df06f43f360d#bkmk_deployment_using_registry_keys...
Read all of those, not one lists "Reset All Keys" just Factory Default. The setup screen is also different as it is InsydeH20 Setup Utility. Will try again later today my time, it is early morning here! Thanks anyway
Ran the script on the old DELL and still got::
Dell Inc. Inspiron 5721
Version: A16
Date: 2018-05-24
La variable est actuellement non définie : 0xC0000100
(The variable is currently undefined)
The BIOS is now in "Custom" mode, (there appears to be no "Setup" mode in the DELL system BIOS