Recent content by zard2004


  1. Solved Secure boot update HowTo

    Oops! Didn't notice it. I've gone back into the Bios to delete it. Many thanks @garlin
  2. Solved Secure boot update HowTo

    Here's the latest on Chromebook converted to Windows 11 via MrChromebox's firmware summary: 1. Update the firmware via his website Updating MrChromebox Custom Firmware | MrChromebox.tech 2. Use Debian Live ISO on USB Thumb Drive (compliments of Rufus) 3. Boot to Chromebook Bios "Esc" key 4...
  3. Solved Secure boot update HowTo

    In the Bios, when adding, it showed 3 certificates in File Explorer and I am not able to navigate anywhere. When I tried the Commit Changes, it showed the Error of Unsupported file type! The downloaded cert from Microsoft ends with .crt
  4. Solved Secure boot update HowTo

    Ran the script without the Option ROM. So it's done for the Chromebook? Here's the Check output: PS C:\users\tengheng\Downloads> .\Drallion_Check_UEFI-CA2023.ps1 -verbose Windows 11 25H2 (26200.8457) Secure Boot: ON Virtualization Based Security: OFF BitLocker on (C:) OFF BIOS Firmware...
  5. Solved Secure boot update HowTo

    Thank you both. In Custom mode, I deleted all except DBT, disabled Secure Boot, saved. Rebooted, ran Update, hit error. So I rebooted via safe mode. Ran Update, got the same wrong signature permission error. Rebooted into Bios, enabled Secure Boot. Boot into Windows. Ran Check, seems like...
  6. Solved Secure boot update HowTo

    I went into the Bios. There is Custom and Standard mode. In Custom Mode, PK Options, KEL Options, DB Options, DBX Options and DBT Options are listed. So I need to delete PK and KEK, and delete the signatures for the DB, DBX and DBT?
  7. Solved Secure boot update HowTo

    Thanks for the fixed. Below is the output for first device, not the Chromebook. For the Chromebook, I will get to MrChromebox, hopefully he is will help out. PS C:\users\tengheng\Downloads> .\Check_UEFI-CA2023.ps1 -verbose Security warning Run only scripts that you trust. While scripts from...
  8. Solved Secure boot update HowTo

    This is for the Chromebook. The error "Failed to append "DBUpdateOROM2023.bin" to UEFI DB, Wrong signature for this UEFI variable, could it be because the original Bios was from Mr.Chromebox, signed by his certificate? So it means that I'm at the end of the road for the Chromebook, just wait...
  9. Solved Secure boot update HowTo

    First device, ran on non-ISE Powershell: PS C:\users\tengheng\Downloads> .\Drallion_Check_UEFI-CA2023.ps1 -verbose Windows 11 25H2 (26200.8328) Secure Boot: ON Virtualization Based Security: ON BitLocker on (C:) OFF BIOS Firmware ------------- Dell Inc. Precision 7960 Tower Version...
  10. Solved Secure boot update HowTo

    Here's the results for the first device. Seems like the CA 2011 certs had been completed, files copied. I noticed Credential Guard is on for SBAT, Illegal characters in path error. Maybe I should turn off Credential Guard via registries and re-run revoke. I am also keen to use the latest ISO...
  11. Solved Secure boot update HowTo

    I’ll try on the second device. Should I try on first device which is not a Chromebook converted to Windows 11? The two commands, first will revoke the CA 2011, so CA 2033 cuts in, and the 3 missing files will get copied into DBX? The second command provides more details, I believe Here's...
  12. Solved Secure boot update HowTo

    I’ll try on the second device. Should I try on first device which is not a Chromebook converted to Windows 11? The two commands, first will revoke the CA 2011, so CA 2033 cuts in, and the 3 missing files will get copied into DBX? The second command provides more details, I believe.
  13. Solved Secure boot update HowTo

    On the other device, I completed the Windows reinstall/setup. Now the registries are appearing and status is showing in progress. +++++ PS C:\Users\tengh\Downloads\SecureBoot-CA-2023-Updates> .\Update_UEFI-CA2023.ps1 Get-FileHash : The file '\\.\HarddiskVolume1\EFI\Microsoft\Boot\bootmgfw.efi'...
  14. Solved Secure boot update HowTo

    Noted with thanks. With this device registries not showing up all the expected registries which others could, I doubt status will appear at all. I have another device with same issue of registries not appearing as well, which I am going to try running Windows setup upgrade from Windows, and...
  15. Solved Secure boot update HowTo

    PS C:\Windows\System32> # Windows PowerShell (<=5.1) PS C:\Windows\System32> Get-ItemPropertyValue -Path HKLM:\SOFTWARE\Microsoft\PowerShell\3\PowerShellEngine -Name PowerShellVersion 5.1.26100.1882 PS C:\Windows\System32> # PowerShell 7+ PS C:\Windows\System32> Get-ItemPropertyValue -Path...
Back
Top Bottom