There really isn't a true guide, because each BIOS can be different with the many BIOS types that Dell has supported over the years.
But here's a quick rundown:
1. If you're not sure, reset back to factory defaults for Secure Boot. This is a "known good" starting place.
2. Check if your Dell has an option for Custom (or User) mode. Anything but Standard (or Factory). Select that option. Some BIOS'es will require the user to set an Admin password before unlocking additional options.
3. Leave Secure Boot off, start Windows. Run the update script. Since you have an unsupported PC, it will start with the less intrusive option of copying the KEK CA 2023 cert to the EFI volume.
4. Return to BIOS. If you have a KEK enrollment menu, use it to select the system drive (if you're not sure, play around until you see a folder named "EFI"). Under the EFI folder will be a "Certs" subfolder. Try to load the KEK CA 2023 cert file from there. There might be multiple copies, but they're all the same file renamed because some BIOS'es are picky about the filename extension.
Depending on your Dell BIOS, this may not work. It depends if the cert file format is accepted by this BIOS version. Some Dell's do not.
5. If you're successfully, restart Windows and run the script again. It will try to finish the rest of the update.
6. If your BIOS rejected the file, we proceed to the next phase and Delete All Keys. Restart Windows and run the script again.
That's about it. Assuming your Dell isn't too bad, either the manual KEK enrollment works or clearing the factory keys will work.
But here's a quick rundown:
1. If you're not sure, reset back to factory defaults for Secure Boot. This is a "known good" starting place.
2. Check if your Dell has an option for Custom (or User) mode. Anything but Standard (or Factory). Select that option. Some BIOS'es will require the user to set an Admin password before unlocking additional options.
3. Leave Secure Boot off, start Windows. Run the update script. Since you have an unsupported PC, it will start with the less intrusive option of copying the KEK CA 2023 cert to the EFI volume.
Code:
Update-UEFI.bat4. Return to BIOS. If you have a KEK enrollment menu, use it to select the system drive (if you're not sure, play around until you see a folder named "EFI"). Under the EFI folder will be a "Certs" subfolder. Try to load the KEK CA 2023 cert file from there. There might be multiple copies, but they're all the same file renamed because some BIOS'es are picky about the filename extension.
Depending on your Dell BIOS, this may not work. It depends if the cert file format is accepted by this BIOS version. Some Dell's do not.
5. If you're successfully, restart Windows and run the script again. It will try to finish the rest of the update.
6. If your BIOS rejected the file, we proceed to the next phase and Delete All Keys. Restart Windows and run the script again.
That's about it. Assuming your Dell isn't too bad, either the manual KEK enrollment works or clearing the factory keys will work.
My Computer
At a glance
Windows 7
- OS
- Windows 7
