thanks, got it to run on the old laptop, which turns out to be an Acer (not Asus)The verbose mode is triggered by adding "-Verbose" to the end of whatever you used to run the check script in the first place.
Either:
.\Check_UEFI-CA2023.ps1 -Verbose
.\Check-UEFI.bat -Verbose
Both the GitHub and post #1 version of the ZIP file should have the full set of both .ps1 and .bat scripts.
The overriding problem is I don't see the KEK CA 2023 applied (which is the most important cert in this migration). Without the KEK CA 2023 in place, having a CA 2023 boot manager is untrusted.
Can you run the check script using -Verbose added to the command line?
Factory Default UEFI PK Cert
----------------------------
(NONE)
UEFI PK Cert
------------
Acer
Manual update of [KEK CA 2023] is REQUIRED.
Factory Default UEFI KEK Certs
------------------------------
(NONE)
UEFI KEK Certs
--------------
Microsoft Corporation KEK CA 2011
Acer
Factory Default UEFI DB Certs
-----------------------------
(NONE)
need to try on the dell tomorrow (its in a different location) and will report back - thanks for your tools and help
My Computer
At a glance
Win11
- OS
- Win11




