Did you manually update your Secure Boot Keys ?


Buddywh said:
I understand Asrock MB's can be a PITA to update BIOS... it's great to know you got yours done!
Click to expand...
It's actually easy, just that unlike the Asus ROG Strix B550-F Gaming, it defaults to CSM. I always have to turn that off.

I also have to re-enable Above 4G Decoding and Resizable BAR.
 

My Computers My Computers

System One System Two

  • At a glance

    Windows 11 Pro x64 24H2Ryzen 9 5900X64 GB G.Skill RipJaws V F4-3200C16D-64GVKASRock Steel Legend Arc B580 12 GB
    OS
    Windows 11 Pro x64 24H2
    Computer type
    PC/Desktop
    CPU
    Ryzen 9 5900X
    Motherboard
    ASRock B550 PG Velocita (UEFI-BIOS 3.90)
    Memory
    64 GB G.Skill RipJaws V F4-3200C16D-64GVK
    Graphics Card(s)
    ASRock Steel Legend Arc B580 12 GB
    Monitor(s) Displays
    Alienware AW3423DWF OLED ultrawide
    Hard Drives
    Samsung 990 Pro 1 TB NVMe SSD
    PSU
    eVGA Supernova 750 G3
    Case
    Corsair 275R
    Internet Speed
    VTel FTTH 1 Gb down and 1 Gb up

  • At a glance

    Windows 11 Home x64 25H2Ryzen 7 5800X3D32 GB (2x16 GB G.Skill TridentZ Neo)Sapphire Nitro+ Radeon RX 6750 XT
    Operating System
    Windows 11 Home x64 25H2
    Computer type
    PC/Desktop
    CPU
    Ryzen 7 5800X3D
    Motherboard
    Asus ROG Strix B550-F Gaming (UEFI-BIOS version 3636)
    Memory
    32 GB (2x16 GB G.Skill TridentZ Neo)
    Graphics card(s)
    Sapphire Nitro+ Radeon RX 6750 XT
    Hard Drives
    Samsung 970 Pro 512 GB NVMe SSD
    PSU
    Corsair RM850x
    Case
    Fractal Focus G
Khoaimi said:
Can you be more specific? I also have crt files like yours (not ,der files)
How did you edit Garlin's file? Can you share specifically?
Click to expand...
Hi, below is basically what I edited. Commented all those statements shown with #, and then added "$SourceFile = "D:\temp\microsoft corporation kek 2k ca 2023.crt". You can change this statement to point to other .crt file you want to copy into the EFI and then run again.

#$URL = 'https://raw.githubusercontent.com/m...ates/microsoft corporation kek 2k ca 2023.der'

#$CertName = 'Microsoft Corporation KEK 2K CA 2023.der'
#$SourceFile = "$env:TEMP\$CertName"
$SourceFile = "D:\temp\microsoft corporation kek 2k ca 2023.crt"

[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12
$ProgressPreference = 'SilentlyContinue'

#try {
# Invoke-WebRequest -UseBasicParsing -Uri $URL -OutFile $SourceFile
#}
#catch {
# $_.Exception.Message
# exit 1
#}
 

My Computer My Computer

At a glance

Windows 11
OS
Windows 11
Buddywh said:
That's true... just load default keys in your BIOS' Secure Boot settings section does it, then re-run the scripts for loading the 2023 key into DB and don't run the Revoke Trust scripts this time. But also, some of these pre-built systems and laptops (like Dell, HP, Lenovo) don't have all the controls exposed in their BIOS settings, they might have to get more aggressive with something like a complete CMOS reset.

If you do this after Microsoft is in their enforcement phase though (when Microsoft revokes trust in the 2011 CA key) I assume Windows will just re-load the key back into DBX at the next re-start. That would be the logical thing.
Click to expand...
I understand that.
 

My Computer My Computer

At a glance

Windows 11 Pro 25H2Intel Core i5 12th generation16GB
OS
Windows 11 Pro 25H2
Computer type
PC/Desktop
CPU
Intel Core i5 12th generation
Motherboard
GIGABYTE
Memory
16GB
PSU
750W
I have followed the instructions and i end up with this result.

But i am still getting an error in the event log.

Event ID 1801 Microsoft-Windows-TPM-WMI
Secure Boot CA/keys need to be updated. This device signature information is included here.
My BIOS is about 2 versions out of date but i really hate updating it.

Screenshot 2025-10-18 145112.webp
 

My Computer My Computer

At a glance

Windows 11 ProIntel Core i9-14900KF64GB G.Skill Trident Z5Gigabyte RTX 4080 Super Windforce
OS
Windows 11 Pro
Computer type
PC/Desktop
Manufacturer/Model
Aftershock
CPU
Intel Core i9-14900KF
Motherboard
MSI MPG Z790 Edge TI Max AX
Memory
64GB G.Skill Trident Z5
Graphics Card(s)
Gigabyte RTX 4080 Super Windforce
Sound Card
Realtek 8-Channel (7.1) HD Audio with Audio Boost 5
Monitor(s) Displays
AOC 27\ Q27G4N QHD
Screen Resolution
1920 x 1080
Hard Drives
2TB Gen4 Lexar NM790
8TB Western Digital Blue
PSU
1300W Inwin 80+
Case
NZXT H9 Flow
Cooling
Aftershock Glacier Mirror 360mm
Keyboard
SteelSeries Apex 5
Mouse
SteelSeries Rival 5
Internet Speed
100/40
Browser
Edge
Antivirus
Eset Endpoint
MikeKul said:
Event ID 1801 Microsoft-Windows-TPM-WMI
Secure Boot CA/keys need to be updated. This device signature information is included here.
My BIOS is about 2 versions out of date but i really hate updating it.
Click to expand...
I'd suggest updating to the latest BIOS if at all possible, even if you'd prefer not, especially if it's dated some time in September or later and your motherboard or system is relatively recently mfr'd.

First reason is it will likely include all of the 2023 secure boot keys as defaults, no special efforts or running of PS scripts required, including the Option ROM key which you do appear to still be missing. And second is (if an AM4 or AM5 motherboard) it might include the TPM-WMI out-of-bounds security patch.

Either of these may (or may not) be related to the event log message you're getting.
 

My Computers My Computers

System One System Two

  • At a glance

    Windows 11 ProRyzen 7 5800XGSkill 3200, 2x8GBMSI RX 6800 XT Gaming Z
    OS
    Windows 11 Pro
    Computer type
    PC/Desktop
    Manufacturer/Model
    DIY
    CPU
    Ryzen 7 5800X
    Motherboard
    Gigabyte B550M Aorus Pro
    Memory
    GSkill 3200, 2x8GB
    Graphics Card(s)
    MSI RX 6800 XT Gaming Z
    Sound Card
    on-board Realtek
    Monitor(s) Displays
    MSI 180hz
    Screen Resolution
    1440p
    Hard Drives
    Samsung 980 Pro, Samsung 870 Evo, generic PCIe NVME, WD 1TB 2.5" laptop spinner
    PSU
    Corsair RM 650
    Case
    mATX
    Cooling
    BeQuiet 240mm AIO and a bunch of case fans
    Keyboard
    one that clacks softly
    Mouse
    logitech
    Internet Speed
    bunches of bps
    Browser
    Firefox
    Antivirus
    Windows' own

  • At a glance

    Win11 ProRyzen 7 170016GB DDR4RX-480
    Operating System
    Win11 Pro
    Computer type
    PC/Desktop
    Manufacturer/Model
    DIY
    CPU
    Ryzen 7 1700
    Motherboard
    GA-AB350M G-3
    Memory
    16GB DDR4
    Graphics card(s)
    RX-480
    Sound Card
    In-Built Realtek
    Monitor(s) Displays
    Samsung
    Screen Resolution
    1440p
    Hard Drives
    NVME/SSD's
    PSU
    Thermaltake BX1 550W
    Case
    Some junky thing
    Cooling
    ThermalTake Assassin(?)
    Browser
    FF/Edge
    Antivirus
    Whatever Windows does
    Other Info
    Secure Boot enabled updated to 2023 CA keys, TPM2.0 enabled with system drive Bitlocker'd.
MikeKul said:
I have followed the instructions and i end up with this result.

But i am still getting an error in the event log.

Event ID 1801 Microsoft-Windows-TPM-WMI
Secure Boot CA/keys need to be updated. This device signature information is included here.
My BIOS is about 2 versions out of date but i really hate updating it.

View attachment 149536
Click to expand...
This all looks fine. My advice? Stop looking in Event Log! I get the same thing whenever I boot.

That happens on multiple computers from different vendors here.
 

My Computers My Computers

System One System Two Other systems

  • At a glance

    Win 11 Pro 25H2, Build 26200.8894Intel Core i5 1450064GB DDR4GeForce RTX 4060
    OS
    Win 11 Pro 25H2, Build 26200.8894
    Computer type
    PC/Desktop
    Manufacturer/Model
    Home Brew
    CPU
    Intel Core i5 14500
    Motherboard
    Gigabyte B760M G P WIFI
    Memory
    64GB DDR4
    Graphics Card(s)
    GeForce RTX 4060
    Sound Card
    Chipset Realtek
    Monitor(s) Displays
    LG 45" Ultragear, Acer 24" 1080p
    Screen Resolution
    5120x1440, 1920x1080
    Hard Drives
    Crucial P310 2TB 2280 PCIe Gen4 3D NAND NVMe M.2 SSD (O/S)
    Silicon Power 2TB US75 NVMe PCIe Gen4 M.2 2280 SSD (backup)
    Crucial BX500 2TB 3D NAND (2nd backup)
    Seagate 4TB Ironwolf, rotating HDD archive files
    External off-line backup Drives: 2 NVMe 4TB drives in external enclosures
    PSU
    Thermaltake Toughpower GF3 750W
    Case
    LIAN LI LANCOOL 216 E-ATX PC Case
    Cooling
    Lots of fans!
    Keyboard
    Microsoft Comfort Curve 2000
    Mouse
    Logitech G305
    Internet Speed
    Verizon FiOS 1GB
    Browser
    Firefox
    Antivirus
    Malware Bytes & Windows Defender Security

  • At a glance

    Win 11 Pro 25H2, Build 26200.8894Intel Core i5 1440032GB DDR5Intel 700 Embedded GPU
    Operating System
    Win 11 Pro 25H2, Build 26200.8894
    Computer type
    PC/Desktop
    Manufacturer/Model
    Home Brew
    CPU
    Intel Core i5 14400
    Motherboard
    Gigabyte B760M DS3H AX
    Memory
    32GB DDR5
    Graphics card(s)
    Intel 700 Embedded GPU
    Sound Card
    Realtek Embedded
    Monitor(s) Displays
    27" HP 1080p
    Screen Resolution
    1920x1080
    Hard Drives
    Crucial P310 2TB 2280 PCIe Gen4 eD NAND PCIe SSD
    Samsung EVO 990 2TB NVMe Gen4 SSD
    Samsung 2TB SATA SSD
    PSU
    Thermaltake Smart BM3 650W
    Case
    Okinos Micro ATX Case
    Cooling
    Fans
    Keyboard
    Microsoft Comfort Curve 2000
    Mouse
    Logitech G305
    Internet Speed
    Verizon FiOS 1GB
    Browser
    Firefox
    Antivirus
    Malware Bytes & Windows Defender Security
  • Nimo N171 17" Laptop, (Intel i3-1215U, 16GB RAM, 2TB NVMe, Win11 Pro)
    Acemagic Vista Mini PC V1 (Intel N150, 16GB RAM, 1TB NVMe, Win11 Pro)
    HP ENVY h8-1540t, (24GB RAM, 2TB SSD, 2TB HDD, Win11 Pro)
Thanks for the replies.
Latest BIOS for the motherboard is dated August, so if I need to update, I will wait & leave it for a job over Christmas.
 

My Computer My Computer

At a glance

Windows 11 ProIntel Core i9-14900KF64GB G.Skill Trident Z5Gigabyte RTX 4080 Super Windforce
OS
Windows 11 Pro
Computer type
PC/Desktop
Manufacturer/Model
Aftershock
CPU
Intel Core i9-14900KF
Motherboard
MSI MPG Z790 Edge TI Max AX
Memory
64GB G.Skill Trident Z5
Graphics Card(s)
Gigabyte RTX 4080 Super Windforce
Sound Card
Realtek 8-Channel (7.1) HD Audio with Audio Boost 5
Monitor(s) Displays
AOC 27\ Q27G4N QHD
Screen Resolution
1920 x 1080
Hard Drives
2TB Gen4 Lexar NM790
8TB Western Digital Blue
PSU
1300W Inwin 80+
Case
NZXT H9 Flow
Cooling
Aftershock Glacier Mirror 360mm
Keyboard
SteelSeries Apex 5
Mouse
SteelSeries Rival 5
Internet Speed
100/40
Browser
Edge
Antivirus
Eset Endpoint
My laptop manufacturer is not providing any updates. Does changing the CMOS battery reset the keys to their old values? I remember something like this happened to me once—I had to re-run the PowerShell commands to receive new codes again.
 

My Computers My Computers

System One System Two

  • At a glance

    Windows 11 Pro 25H2Ryzen 5 3500U8GBVega 8
    OS
    Windows 11 Pro 25H2
    Computer type
    Laptop
    Manufacturer/Model
    Huawei MateBook D15
    CPU
    Ryzen 5 3500U
    Memory
    8GB
    Graphics Card(s)
    Vega 8
    Screen Resolution
    FHD
    Hard Drives
    256GB Samsung SSD + 1TB HDD
    Browser
    Microsoft Edge
    Antivirus
    ESET Smart Security Premium

  • At a glance

    Windows 10 Enterprise LTSC 21H2intel core i7 6700HQ16GBNvidia Geforce GTX1060 (6GB)
    Operating System
    Windows 10 Enterprise LTSC 21H2
    Computer type
    Laptop
    Manufacturer/Model
    MSI GS73 6RF Stealth Pro
    CPU
    intel core i7 6700HQ
    Memory
    16GB
    Graphics card(s)
    Nvidia Geforce GTX1060 (6GB)
    Screen Resolution
    FHD
    Hard Drives
    128GB SSD + 1TB HDD
    Browser
    Microsoft Edge
    Antivirus
    Windows Defender
Sheikh said:
My laptop manufacturer is not providing any updates. Does changing the CMOS battery reset the keys to their old values? I remember something like this happened to me once—I had to re-run the PowerShell commands to receive new codes again.
Click to expand...
For laptops manufactured before 2023, forget the manufacturer, update manually, it's very simple.
 

My Computer My Computer

At a glance

Windows 10
OS
Windows 10
MikeKul said:
But i am still getting an error in the event log.

Event ID 1801 Microsoft-Windows-TPM-WMI
Secure Boot CA/keys need to be updated. This device signature information is included here.
Click to expand...

I just looked at my event viewer and I'm seeing Event ID 1801 as well.
First instance was Oct 14th, 07:18 AM, right after installing the latest CU!
My System One is on it's latest BIOS version, dated 2025/05/26.
1760852855127.webp

Strangely enough, my System Two does not show event 1801. It's latest BIOS is 2 years old.
 

My Computers My Computers

System One System Two Other systems

  • At a glance

    Win 11 Pro 25H2 26200.8894Intel® Core™ i7-14700KG.SKILL Ripjaws S5 Series 64GB (2 x 32GB) DDR5ASUS GeForce RTX 4070 Super 12GB
    OS
    Win 11 Pro 25H2 26200.8894
    Computer type
    PC/Desktop
    Manufacturer/Model
    Self Built
    CPU
    Intel® Core™ i7-14700K
    Motherboard
    ASUS TUF Z690-PLUS WIFI (BIOS 4505)
    Memory
    G.SKILL Ripjaws S5 Series 64GB (2 x 32GB) DDR5
    Graphics Card(s)
    ASUS GeForce RTX 4070 Super 12GB
    Sound Card
    Sound Blaster AE-5 Plus
    Monitor(s) Displays
    ASUS TUF Gaming 27" 2K HDR Gaming
    Screen Resolution
    2560 x 1440
    Hard Drives
    Samsung 990 Pro 1TB NVMe (Win 11 25H2)
    SK hynix P41 500GB NVMe
    SK hynix P41 2TB NVMe (x3)
    Crucial P3 Plus 4TB
    PSU
    Corsair RM850x Shift
    Case
    Antec Dark Phantom DP502 FLUX
    Cooling
    Corsair Nautilus 360 RS AIO
    Keyboard
    Logitech MK 320
    Mouse
    Razer Basilisk V3
    Internet Speed
    750Mbs
    Browser
    Firefox
    Antivirus
    Winows Security
    Other Info
    MR 8.1 Home

  • At a glance

    Win 11 Pro 25H2 26200.8894Intel Core i5-1140064 GB DDR4MSI GeForce RTX 3060 Ventus 2X 12GB
    Operating System
    Win 11 Pro 25H2 26200.8894
    Computer type
    PC/Desktop
    Manufacturer/Model
    Self Built
    CPU
    Intel Core i5-11400
    Motherboard
    Asus TUF Gaming Z590 Plus WiFi (BIOS 2803)
    Memory
    64 GB DDR4
    Graphics card(s)
    MSI GeForce RTX 3060 Ventus 2X 12GB
    Sound Card
    SoundBlaster Audigy Fx V2
    Monitor(s) Displays
    Samsung F27T350
    Screen Resolution
    1920x1080
    Hard Drives
    Samsung 980 Pro 1TB
    Samsung 970 EVO Plus 2TB
    Samsung 870 EVO 500GB SSD
    PSU
    Corsair HX750
    Case
    Cougar MX330-G Window
    Cooling
    Thermalright Frozen Edge 240 Black AIO
    Internet Speed
    350Mbps
    Browser
    Firefox
    Antivirus
    Windows Security
  • System Three
    Win 11 Pro 25H2 26200.8894
    ASUS PRIME Z370-P II BIOS 3004 7/12/21
    Intel Core i7-8700 CPU @ 3.20GHz
    32GB DDR4 RAM (4x8)
    iGPU Intel UHD Graphics 630
    Mid-Tower Desktop

My Computers My Computers

System One System Two

  • At a glance

    Windows 11 Pro 25H2Ryzen 5 3500U8GBVega 8
    OS
    Windows 11 Pro 25H2
    Computer type
    Laptop
    Manufacturer/Model
    Huawei MateBook D15
    CPU
    Ryzen 5 3500U
    Memory
    8GB
    Graphics Card(s)
    Vega 8
    Screen Resolution
    FHD
    Hard Drives
    256GB Samsung SSD + 1TB HDD
    Browser
    Microsoft Edge
    Antivirus
    ESET Smart Security Premium

  • At a glance

    Windows 10 Enterprise LTSC 21H2intel core i7 6700HQ16GBNvidia Geforce GTX1060 (6GB)
    Operating System
    Windows 10 Enterprise LTSC 21H2
    Computer type
    Laptop
    Manufacturer/Model
    MSI GS73 6RF Stealth Pro
    CPU
    intel core i7 6700HQ
    Memory
    16GB
    Graphics card(s)
    Nvidia Geforce GTX1060 (6GB)
    Screen Resolution
    FHD
    Hard Drives
    128GB SSD + 1TB HDD
    Browser
    Microsoft Edge
    Antivirus
    Windows Defender

My Computers My Computers

System One System Two

  • At a glance

    Windows 11 ProRyzen 7 5800XGSkill 3200, 2x8GBMSI RX 6800 XT Gaming Z
    OS
    Windows 11 Pro
    Computer type
    PC/Desktop
    Manufacturer/Model
    DIY
    CPU
    Ryzen 7 5800X
    Motherboard
    Gigabyte B550M Aorus Pro
    Memory
    GSkill 3200, 2x8GB
    Graphics Card(s)
    MSI RX 6800 XT Gaming Z
    Sound Card
    on-board Realtek
    Monitor(s) Displays
    MSI 180hz
    Screen Resolution
    1440p
    Hard Drives
    Samsung 980 Pro, Samsung 870 Evo, generic PCIe NVME, WD 1TB 2.5" laptop spinner
    PSU
    Corsair RM 650
    Case
    mATX
    Cooling
    BeQuiet 240mm AIO and a bunch of case fans
    Keyboard
    one that clacks softly
    Mouse
    logitech
    Internet Speed
    bunches of bps
    Browser
    Firefox
    Antivirus
    Windows' own

  • At a glance

    Win11 ProRyzen 7 170016GB DDR4RX-480
    Operating System
    Win11 Pro
    Computer type
    PC/Desktop
    Manufacturer/Model
    DIY
    CPU
    Ryzen 7 1700
    Motherboard
    GA-AB350M G-3
    Memory
    16GB DDR4
    Graphics card(s)
    RX-480
    Sound Card
    In-Built Realtek
    Monitor(s) Displays
    Samsung
    Screen Resolution
    1440p
    Hard Drives
    NVME/SSD's
    PSU
    Thermaltake BX1 550W
    Case
    Some junky thing
    Cooling
    ThermalTake Assassin(?)
    Browser
    FF/Edge
    Antivirus
    Whatever Windows does
    Other Info
    Secure Boot enabled updated to 2023 CA keys, TPM2.0 enabled with system drive Bitlocker'd.

My Computers My Computers

System One System Two Other systems

  • At a glance

    Win 11 Pro 25H2, Build 26200.8894Intel Core i5 1450064GB DDR4GeForce RTX 4060
    OS
    Win 11 Pro 25H2, Build 26200.8894
    Computer type
    PC/Desktop
    Manufacturer/Model
    Home Brew
    CPU
    Intel Core i5 14500
    Motherboard
    Gigabyte B760M G P WIFI
    Memory
    64GB DDR4
    Graphics Card(s)
    GeForce RTX 4060
    Sound Card
    Chipset Realtek
    Monitor(s) Displays
    LG 45" Ultragear, Acer 24" 1080p
    Screen Resolution
    5120x1440, 1920x1080
    Hard Drives
    Crucial P310 2TB 2280 PCIe Gen4 3D NAND NVMe M.2 SSD (O/S)
    Silicon Power 2TB US75 NVMe PCIe Gen4 M.2 2280 SSD (backup)
    Crucial BX500 2TB 3D NAND (2nd backup)
    Seagate 4TB Ironwolf, rotating HDD archive files
    External off-line backup Drives: 2 NVMe 4TB drives in external enclosures
    PSU
    Thermaltake Toughpower GF3 750W
    Case
    LIAN LI LANCOOL 216 E-ATX PC Case
    Cooling
    Lots of fans!
    Keyboard
    Microsoft Comfort Curve 2000
    Mouse
    Logitech G305
    Internet Speed
    Verizon FiOS 1GB
    Browser
    Firefox
    Antivirus
    Malware Bytes & Windows Defender Security

  • At a glance

    Win 11 Pro 25H2, Build 26200.8894Intel Core i5 1440032GB DDR5Intel 700 Embedded GPU
    Operating System
    Win 11 Pro 25H2, Build 26200.8894
    Computer type
    PC/Desktop
    Manufacturer/Model
    Home Brew
    CPU
    Intel Core i5 14400
    Motherboard
    Gigabyte B760M DS3H AX
    Memory
    32GB DDR5
    Graphics card(s)
    Intel 700 Embedded GPU
    Sound Card
    Realtek Embedded
    Monitor(s) Displays
    27" HP 1080p
    Screen Resolution
    1920x1080
    Hard Drives
    Crucial P310 2TB 2280 PCIe Gen4 eD NAND PCIe SSD
    Samsung EVO 990 2TB NVMe Gen4 SSD
    Samsung 2TB SATA SSD
    PSU
    Thermaltake Smart BM3 650W
    Case
    Okinos Micro ATX Case
    Cooling
    Fans
    Keyboard
    Microsoft Comfort Curve 2000
    Mouse
    Logitech G305
    Internet Speed
    Verizon FiOS 1GB
    Browser
    Firefox
    Antivirus
    Malware Bytes & Windows Defender Security
  • Nimo N171 17" Laptop, (Intel i3-1215U, 16GB RAM, 2TB NVMe, Win11 Pro)
    Acemagic Vista Mini PC V1 (Intel N150, 16GB RAM, 1TB NVMe, Win11 Pro)
    HP ENVY h8-1540t, (24GB RAM, 2TB SSD, 2TB HDD, Win11 Pro)
Apologies for not reading this entire thread... I stopped participating back in the first dozen pages. Haven't been here for a while.

I just have one question: Has MS started issuing "regular" updates that automatically install the new Cert updates?
 

My Computer My Computer

At a glance

Windows 11 Pro 24H2Intel Ultra 7 155H16gbIntel Arc integrated
OS
Windows 11 Pro 24H2
Computer type
Laptop
Manufacturer/Model
HP
CPU
Intel Ultra 7 155H
Memory
16gb
Graphics Card(s)
Intel Arc integrated
Hard Drives
SSD
Buddywh said:
First post in this thread has instructions.
Click to expand...
This method is not permanent. As soon as I change the CMOS, all keys become vanished! :)
 

My Computers My Computers

System One System Two

  • At a glance

    Windows 11 Pro 25H2Ryzen 5 3500U8GBVega 8
    OS
    Windows 11 Pro 25H2
    Computer type
    Laptop
    Manufacturer/Model
    Huawei MateBook D15
    CPU
    Ryzen 5 3500U
    Memory
    8GB
    Graphics Card(s)
    Vega 8
    Screen Resolution
    FHD
    Hard Drives
    256GB Samsung SSD + 1TB HDD
    Browser
    Microsoft Edge
    Antivirus
    ESET Smart Security Premium

  • At a glance

    Windows 10 Enterprise LTSC 21H2intel core i7 6700HQ16GBNvidia Geforce GTX1060 (6GB)
    Operating System
    Windows 10 Enterprise LTSC 21H2
    Computer type
    Laptop
    Manufacturer/Model
    MSI GS73 6RF Stealth Pro
    CPU
    intel core i7 6700HQ
    Memory
    16GB
    Graphics card(s)
    Nvidia Geforce GTX1060 (6GB)
    Screen Resolution
    FHD
    Hard Drives
    128GB SSD + 1TB HDD
    Browser
    Microsoft Edge
    Antivirus
    Windows Defender
Hi

Do I need to do anything or I am fine.

[System.Text.Encoding]::ASCII.GetString((Get-SecureBootUEFI db).bytes) -match ‘Windows UEFI CA 2023’

Running the above command gives me "True" But still you can see in the screenshot 'Disk 0 : Boot Manager [Production PCA 2011] is allowed' is mentioned. If I need to do anything please let me know.

Thanks

Manu
 

Attachments

  • Screenshot.webp
    Screenshot.webp
    38.5 KB · Views: 7

My Computers My Computers

System One System Two

  • At a glance

    Windows 11 ProIntel 14100G.Skill Trident Z5 Neo RGB 32GB (2x16GB) DDR5...Integrated
    OS
    Windows 11 Pro
    Computer type
    PC/Desktop
    Manufacturer/Model
    Custom Made
    CPU
    Intel 14100
    Motherboard
    Gigabyte B760M D2H
    Memory
    G.Skill Trident Z5 Neo RGB 32GB (2x16GB) DDR5 6000
    Graphics Card(s)
    Integrated
    Sound Card
    Built-in
    Monitor(s) Displays
    40Inch Blaupunkt 1920X1080 & Acer 24Inch 1920X1080
    Screen Resolution
    1920 X 1080
    Hard Drives
    Samsung 990Pro 1TB &
    Western Digital WD Black SN850X NVMe 1TB
    PSU
    550W Corsair
    Case
    Chiptronix
    Cooling
    Default
    Keyboard
    Logitech Wireless
    Mouse
    Logitech Wireless
    Internet Speed
    500Mbps
    Browser
    Brave
    Antivirus
    Kaspersky Premium

  • At a glance

    Windows 11 ProIntel G760016GB Corsair VengeanceIntegrated
    Operating System
    Windows 11 Pro
    Computer type
    PC/Desktop
    Manufacturer/Model
    Custom Built
    CPU
    Intel G7600
    Motherboard
    Asus PRIME-H610M-E-D4
    Memory
    16GB Corsair Vengeance
    Graphics card(s)
    Integrated
    Sound Card
    In Built
    Monitor(s) Displays
    Samsung 22Inch
    Screen Resolution
    1920 X 1080
    Hard Drives
    Samsung Evo 970 Pro 500GB
    PSU
    CoolerMaster 450W
    Case
    Normal
    Cooling
    Default
    Keyboard
    Logitech Wireless
    Mouse
    Logitech Wireless
    Internet Speed
    500Mbps
    Browser
    Brave
    Antivirus
    Kaspersky Total Security

My Computer My Computer

At a glance

Windows 11 ProCore i7-13700K64 GB Kingston Fury Beast DDR5Gigabyte GeForce RTX 2060 Super Gaming OC 8G
OS
Windows 11 Pro
Computer type
PC/Desktop
Manufacturer/Model
Self build
CPU
Core i7-13700K
Motherboard
Asus TUF Gaming Plus WiFi Z790
Memory
64 GB Kingston Fury Beast DDR5
Graphics Card(s)
Gigabyte GeForce RTX 2060 Super Gaming OC 8G
Sound Card
Realtek S1200A
Monitor(s) Displays
Viewsonic VP2770 & Dell (secondary)
Screen Resolution
2560 x 1440
Hard Drives
Kingston KC3000 2TB NVME SSD & SATA HDDs & SSD
PSU
EVGA SuperNova G2 850W
Case
Nanoxia Deep Silence 1
Cooling
Noctua NH-D14
Keyboard
Microsoft Digital Media Pro
Mouse
Logitech Wireless
Internet Speed
80 Mb / s
Browser
Chrome
Antivirus
Defender, Malwarebytes Free & AdwCleaner
Steve C said:
Or wait for Windows Update to apply the fixes?
Click to expand...
I'm going to install Linux on my laptop. It won't get those updates from MS anymore. After I want to re-install Windows iso, I will face some issues. So, I have to force update it now before cleaning.
 

My Computers My Computers

System One System Two

  • At a glance

    Windows 11 Pro 25H2Ryzen 5 3500U8GBVega 8
    OS
    Windows 11 Pro 25H2
    Computer type
    Laptop
    Manufacturer/Model
    Huawei MateBook D15
    CPU
    Ryzen 5 3500U
    Memory
    8GB
    Graphics Card(s)
    Vega 8
    Screen Resolution
    FHD
    Hard Drives
    256GB Samsung SSD + 1TB HDD
    Browser
    Microsoft Edge
    Antivirus
    ESET Smart Security Premium

  • At a glance

    Windows 10 Enterprise LTSC 21H2intel core i7 6700HQ16GBNvidia Geforce GTX1060 (6GB)
    Operating System
    Windows 10 Enterprise LTSC 21H2
    Computer type
    Laptop
    Manufacturer/Model
    MSI GS73 6RF Stealth Pro
    CPU
    intel core i7 6700HQ
    Memory
    16GB
    Graphics card(s)
    Nvidia Geforce GTX1060 (6GB)
    Screen Resolution
    FHD
    Hard Drives
    128GB SSD + 1TB HDD
    Browser
    Microsoft Edge
    Antivirus
    Windows Defender
Steve C said:
Or wait for Windows Update to apply the fixes?
Click to expand...
Or update motherboard BIOS to get all the 2023 keys as defaults... assuming it's not been orphaned by it's manufacturer.
 

My Computers My Computers

System One System Two

  • At a glance

    Windows 11 ProRyzen 7 5800XGSkill 3200, 2x8GBMSI RX 6800 XT Gaming Z
    OS
    Windows 11 Pro
    Computer type
    PC/Desktop
    Manufacturer/Model
    DIY
    CPU
    Ryzen 7 5800X
    Motherboard
    Gigabyte B550M Aorus Pro
    Memory
    GSkill 3200, 2x8GB
    Graphics Card(s)
    MSI RX 6800 XT Gaming Z
    Sound Card
    on-board Realtek
    Monitor(s) Displays
    MSI 180hz
    Screen Resolution
    1440p
    Hard Drives
    Samsung 980 Pro, Samsung 870 Evo, generic PCIe NVME, WD 1TB 2.5" laptop spinner
    PSU
    Corsair RM 650
    Case
    mATX
    Cooling
    BeQuiet 240mm AIO and a bunch of case fans
    Keyboard
    one that clacks softly
    Mouse
    logitech
    Internet Speed
    bunches of bps
    Browser
    Firefox
    Antivirus
    Windows' own

  • At a glance

    Win11 ProRyzen 7 170016GB DDR4RX-480
    Operating System
    Win11 Pro
    Computer type
    PC/Desktop
    Manufacturer/Model
    DIY
    CPU
    Ryzen 7 1700
    Motherboard
    GA-AB350M G-3
    Memory
    16GB DDR4
    Graphics card(s)
    RX-480
    Sound Card
    In-Built Realtek
    Monitor(s) Displays
    Samsung
    Screen Resolution
    1440p
    Hard Drives
    NVME/SSD's
    PSU
    Thermaltake BX1 550W
    Case
    Some junky thing
    Cooling
    ThermalTake Assassin(?)
    Browser
    FF/Edge
    Antivirus
    Whatever Windows does
    Other Info
    Secure Boot enabled updated to 2023 CA keys, TPM2.0 enabled with system drive Bitlocker'd.

My Computers My Computers

System One System Two

  • At a glance

    Windows 11 Pro 25H2Ryzen 5 3500U8GBVega 8
    OS
    Windows 11 Pro 25H2
    Computer type
    Laptop
    Manufacturer/Model
    Huawei MateBook D15
    CPU
    Ryzen 5 3500U
    Memory
    8GB
    Graphics Card(s)
    Vega 8
    Screen Resolution
    FHD
    Hard Drives
    256GB Samsung SSD + 1TB HDD
    Browser
    Microsoft Edge
    Antivirus
    ESET Smart Security Premium

  • At a glance

    Windows 10 Enterprise LTSC 21H2intel core i7 6700HQ16GBNvidia Geforce GTX1060 (6GB)
    Operating System
    Windows 10 Enterprise LTSC 21H2
    Computer type
    Laptop
    Manufacturer/Model
    MSI GS73 6RF Stealth Pro
    CPU
    intel core i7 6700HQ
    Memory
    16GB
    Graphics card(s)
    Nvidia Geforce GTX1060 (6GB)
    Screen Resolution
    FHD
    Hard Drives
    128GB SSD + 1TB HDD
    Browser
    Microsoft Edge
    Antivirus
    Windows Defender
You must log in or register to reply here.

Similar threads

Solved Secure boot update HowTo
31 32 33
Replies
645
Views
111K
TrebleTA
T
  • Sticky
  • Article Article
Updating Microsoft Secure Boot keys before expiration in June 2026
26 27 28
Replies
559
Views
115K
Brink
Brink

Latest Support Threads

Latest Tutorials

Back
Top Bottom