Recent content by xrms3

Hitherto I've made no changes to Secure Boot certificates, belonging firmly to the DO NOTHING group. But this morning received a 'Restart' notification because of a KEK update. The @garlin Check-UEFI script now shows: UEFI KEK Certs -------------- Microsoft Corporation KEK CA 2011...

@Deex2 Hi, I don't know if the following will help with your problem but the timings in your first post suggest it might be the same problem as referred to below. It is based on threads in the Dell Community forums. The first version of the 8940 came out in mid-2020. These machines had a 10th...

@Bastet I've just followed their instructions, downloaded the updated WinPE files and rebuilt the rescue media and it works fine on a revoked pc. Since their WinPE works and so do @hsehestedt's batch files, the question is academic but I can't get WinRE-based media to work at all - not that I...

To be honest I wasn't intending to futz about with this stuff at all. I'm sure MS, Macrium etc will get it sorted out eventually. MS are already trying things out with WinRE and I presume the ADK will get updated too. But your instructions were so clear in helping to pull everything together...

@hsehestedt I couldn't let this pass by without saying thanks for your efforts in providing exemplary instructions here and elsewhere, and also the 2 batch files for updating the ADK and custom media. Having too much spare time yesterday I did both updates using the batch files and the...

Do the systems to which you have applied the revocations still allow you to boot pre-May devices like USB sticks, CDs etc successfully? (Sorry - I see our posts went out simultaneously. Glad everything is resolved.)

No, I haven't tried it. I did notice, though, that following the July update, little fingers have been busy in the C:\$Winreagent directory. It now contains a copy of my current winre.wim plus what appears to be an updated version - update.wim. This may have been a test to confirm that applying...

In the original MS document the revocation consisted of two actions - 1) copying a .p7b file from the local file system to the EFI partition and 2) changing the registry entry. The current version of the document omits item 1 and refers only to item 2. Actually it mentions the p7b file but the...