Recent content by Scott

The latest Winre.wim is over 700 MB, and its only going to get bigger. 1 GB or less is not enough. I realize some users have space issues, but some do not.

Yes, that's exactly what I do. But why skip the script?

That's the script I use, always with the most recent ISO with updated boot files from UUPdump. https://support.microsoft.com/en-US/servicing/os/windows/2025/02/updating-windows-bootable-media-to-use-the-pca2023-signed-boot-manager

Since you run with VBS on, run the update script with the -SkuSiPolicy option. Reboot. Run the check script and it should report current.

It detects my Win 11 install and Macrium boot drives. Bootable Media -------------- USB Drive J: "BOOT2023PCA" Boot File [Windows UEFI CA 2023] is ALLOWED. J:\EFI\Boot\bootx64.efi File Version: 28000.352, SVN 9.0 boot.wim:2 (WinRE 26100.9168) Boot Manager...

Works nicely with more than one drive as well :-) Macrium v8.1.8853 ----------------- WinRE Boot Manager [Windows UEFI CA 2023] is ALLOWED. c:\boot\macrium\WinREFiles\media\EFI\Microsoft\Boot\bootmgfw.efi File Version: 28000.352, SVN 9.0 Bootable Media -------------- USB...

We have sideways rain today...

You can't use Macrium's base WIM, as it's severely outdated. You need to tell Macrium to use the most current WinRE.wim located in your recovery partition. Open an elevated command prompt. Enter: reagentc /info If enabled: reagentc /disable This places the most recent winre.wim into...

Haha, guilty :-)

Dism...Restorehealth runs okay on my system.

@garlin Same result.

https://www.elevenforum.com/t/garlins-powershell-scripts-for-updating-secure-boot-ca-2023.43423/post-766782

Try: .\Update_UEFI-CA2023.ps1 -bootmedia

New SkuSiPolicy and WinRE, all boot media updated. C:\Windows\System32>powershell -ep bypass -f D:\Scripts\BlockedOrNot.ps1 Windows 11 25H2 (26200.9168) VBS: ON Policy File: "\\.\HarddiskVolume1\EFI\Microsoft\Boot\SkuSiPolicy.p7b", Version 3.0.0.17 VolumeName Filename...