Did you manually update your Secure Boot Keys ?

Akeo · Dec 16, 2025

The problem is on your side. https://github.com/pbatard/Mosby/releases/download/v2.8/Mosby_v2.8.zip works and is not empty. Probably some sh*tty security solution (possibly the one from Chrome) flagging it as a false positive. It's up to you to sort it out, as again, the problem is 100% on your side and you will not get a "magic solution" from somebody else but you here.

Dirtyflash · Dec 16, 2025

Akeo said:
The problem is on your side. https://github.com/pbatard/Mosby/releases/download/v2.8/Mosby_v2.8.zip works and is not empty. Probably some sh*tty security solution (possibly the one from Chrome) flagging it as a false positive. It's up to you to sort it out, as again, the problem is 100% on your side and you will not get a "magic solution" from somebody else but you here.

Yeah, I switched from Firefox to Edge and it extracted all the files. Learn something new all the time! It replaced 7 of 8 files when I copy/pasted them over.

andyc56 · Dec 16, 2025

Akeo said:
The problem is on your side. https://github.com/pbatard/Mosby/releases/download/v2.8/Mosby_v2.8.zip works and is not empty. Probably some sh*tty security solution (possibly the one from Chrome) flagging it as a false positive. It's up to you to sort it out, as again, the problem is 100% on your side and you will not get a "magic solution" from somebody else but you here.

Firefox on desktop is flagging Mosby 2.8 as potentially harmful. After clicking Save on the download dialog, the download toolbar button appears with a blue dot as below.

Clicking on the button gives a "Download details" option, which, when expanded, looks like so:

Clicking "Allow download" does the trick. The version of Firefox I used to download earlier Mosby versions did not do this.

SIW2 · Dec 16, 2025

Firefox downloads it fine for me you have to allow it as illustrated in the previous post. It has been doing the blue dot thing for quite a while, it is not very new.

Dirtyflash · Dec 16, 2025

Very interesting, I use Firefox esr, so I don't know if that's why I've never seen the blue dot dialogue boxes?

andyc56 · Dec 16, 2025

Dirtyflash said:
Very interesting, I use Firefox esr, so I don't know if that's why I've never seen the blue dot dialogue boxes?

I think older Firefox versions didn't show the blue dot, but failed without much (if any) visual indication. But as I recall, you could click on the download button and still look at the download history and some indication would be provided that there was a problem. I can't remember details, but I do recall there was an option to bypass the file rejection, as I never had to resort to using another browser.

Dirtyflash · Dec 16, 2025

More interesting tips, wouldn't have thought that check the download history. Some of my attempts resulted in partial incomplete file downloads. All good now, still hesitant to give Mosby another try, mainly because of the secure boot in the BIOS being uncooperative.

Dirtyflash · Dec 17, 2025

Well, I tried for the third time, a few weeks apart with this new version of Mosby not unfortunately making a difference. I’ll give up now as third time was not the lucky charm.

Thierry 83200 · Dec 17, 2025

Good evening,
could you explain the Mosby method to me step by step? When I insert my USB drive and disable Secure Boot, everything seems fine, but upon restarting, a page appears with a countdown timer. I type "Mosby," and then I get another page with "yes" or "no," but everything is written in English, which isn't my language. Thank you very much for your help.

gunrunnerjohn · Dec 17, 2025

Akeo said:
Do just that.

Then download the latest Mosby_v#.#.zip from Releases · pbatard/Mosby and extract the content from that zip archive to the top of the USB you created (it should prompt you to overwrite existing files -- say yes to that).

That's it. You know have a UEFI Shell bootable USB with the latest Mosby.

If you are running Rufus to generate your disk, does it fetch the current version of Mosby?

gunrunnerjohn · Dec 17, 2025

andyc56 said:
Firefox on desktop is flagging Mosby 2.8 as potentially harmful. After clicking Save on the download dialog, the download toolbar button appears with a blue dot as below.

View attachment 157160

Clicking on the button gives a "Download details" option, which, when expanded, looks like so:

View attachment 157161

Clicking "Allow download" does the trick. The version of Firefox I used to download earlier Mosby versions did not do this.

I just downloaded Mosby 2.8 using Firefox 146.0, I saw no warning and the Mosby ZIP file was intact when I checked it.

Akeo · Dec 17, 2025

gunrunnerjohn said:
If you are running Rufus to generate your disk, does it fetch the current version of Mosby?

Nope.

Rufus downloads the latest twice yearly release of the UEFI Shell, which only includes Mosby from the time it was built. Since the next release of the shell will be 26H1 (which won't happen before the first quarter of next year), and Mosby 2.8 was released after the 25H2 Shell release, Mosby 2.8 is not part of the 25H2 Shell, which is why you have to update it manually.

But as I highlighted above, once you have a Shell drive, it is very easy to update Mosby to latest.

Buddywh · Dec 17, 2025

Akeo said:
Nope.

Rufus downloads the latest twice yearly release of the UEFI Shell, which only includes Mosby from the time it was built.

That's good to know!

I must have missed that in the readme's and notes I've read previously because I was totally assuming it DL'd the latest at the time of running RUFUS to create the USB bootable drive.

PerpetualCycle · Dec 17, 2025

New Asus BIOS for z790 and z690

Updated ME firmware and keys. I had already manually updated the secure boot keys, but the default Option ROM was missing. Here is what I get now:

Buddywh · Dec 17, 2025

PerpetualCycle said:
New Asus BIOS for z790 and z690

Updated ME firmware and keys. I had already manually updated the secure boot keys, but the default Option ROM was missing. Here is what I get now:

View attachment 157208

And ASUS does it too: as with my MSI and Gigabyte boards they're adding their own KEK and DB keys to build a complete chain of trust separate and alongside Microsoft's. I've not seen anywhere explaining why they need to do this and have also wondered if it's a potential security hole.

Or, optimistically, might that be needed for an additional security feature Microsoft is going to roll out in some future Windows build that will require these keys to implement?

starchase · Dec 17, 2025

I'm compelled to report that just now using the latest Mosby file from Github my 2016 HP Spectre seems to be on its way to Secure Boot compliance.

Code:

ran script 12/16/25 - results:

PS C:\temp> powershell -nop -ep bypass -f Check_EFIBootFile.ps1
Secure Boot: ON
BitLocker on (C:) OFF

UEFI KEK Certs
--------------
    Microsoft Corporation KEK CA 2011
    Microsoft Corporation KEK 2K CA 2023

UEFI DB Certs
-------------
    Microsoft Corporation UEFI CA 2011
    Microsoft Windows Production PCA 2011
    Microsoft Option ROM UEFI CA 2023
    Microsoft UEFI CA 2023
    Windows UEFI CA 2023

UEFI DBX Certs
--------------

EFI Files
---------
    Disk 0: Boot Manager [Production PCA 2011] is ALLOWED.

    Registry: WindowsUEFICA2023Capable = 0
        [Windows UEFI CA 2023] is not in UEFI DB.

I'm supposing that all I have to do now is wait for the Microsoft magic to happen.

Many thanks to @Akeo for the hard work and perseverance that helps those of us with perfectly good machines that have been abandoned by their manufacturers.

SIW2 · Dec 17, 2025

Dirtyflash said:
Very interesting, I use Firefox esr, so I don't know if that's why I've never seen the blue dot dialogue boxes?

So do I.

the blue dot is small and a bit dull. Easy to miss

this from trying the mosby download

Dirtyflash · Dec 17, 2025

SIW2 said:
So do I.

the blue dot is small and a bit dull. Easy to miss

this from trying the mosby download

View attachment 157219

View attachment 157218

Good to know, I'll look closer next time. Maybe I'll do a test download of Mosby and check. Thanks!

andyc56 · Dec 17, 2025

gunrunnerjohn said:
I just downloaded Mosby 2.8 using Firefox 146.0, I saw no warning and the Mosby ZIP file was intact when I checked it.

I was able to eliminate the Firefox rejection of the Mosby 2.8 download by unchecking the "Block dangerous and deceptive content" checkbox in the Firefox settings shown below.

gunrunnerjohn · Dec 17, 2025

Akeo said:
Nope.

Rufus downloads the latest twice yearly release of the UEFI Shell, which only includes Mosby from the time it was built. Since the next release of the shell will be 26H1 (which won't happen before the first quarter of next year), and Mosby 2.8 was released after the 25H2 Shell release, Mosby 2.8 is not part of the 25H2 Shell, which is why you have to update it manually.

But as I highlighted above, once you have a Shell drive, it is very easy to update Mosby to latest.

Great, thanks! Glad you responded, I'll download the latest and Mosby and update my Rufus disk.

Did you manually update your Secure Boot Keys ?

Well-known member

My Computer My Computer

At a glance

Well-known member

Attachments

My Computer My Computer

At a glance

Well-known member

My Computer My Computer

At a glance

Well-known member

My Computers My Computers

At a glance

At a glance

Well-known member

My Computer My Computer

At a glance

Well-known member

My Computer My Computer

At a glance

Well-known member

My Computer My Computer

At a glance

Well-known member

My Computer My Computer

At a glance

Active member

My Computer My Computer

At a glance

Well-known member

My Computers My Computers

At a glance

At a glance

Well-known member

My Computers My Computers

At a glance

At a glance

Well-known member

My Computer My Computer

At a glance

Well-known member

My Computers My Computers

At a glance

At a glance

Syzygy

My Computers My Computers

At a glance

At a glance

Well-known member

My Computers My Computers

At a glance

At a glance

Well-known member

My Computers My Computers

At a glance

At a glance

Well-known member

My Computers My Computers

At a glance

At a glance

Well-known member

My Computer My Computer

At a glance

Well-known member

My Computer My Computer

At a glance

Well-known member

My Computers My Computers

At a glance

At a glance

Similar threads

My Computer

My Computer

My Computer

My Computers

My Computer

My Computer

My Computer

My Computer

My Computer

My Computers

My Computers

My Computer

My Computers

My Computers

My Computers

My Computers

My Computers

My Computer

My Computer

My Computers