Solved garlin's PowerShell scripts for updating Secure Boot CA 2023


It's called the "ICE" tact
anchamp65 said:
Guys, can we keep this thread about secure boot related and not about how you customize and use Windows
You can have a private chat about it if you want to continue

Thanks in advance guys
Click to expand...
Just gave em an honest answer
 

My Computer My Computer

At a glance

Win11 24H2 IOT LTSC / Win11 Pro 25H2AMD Ryzen 7 8700G / Ryzen 7 8700G / Ryzen 8600GF5-6000J3636F16GX2-FX5 32GB / Lexar Ares RGB ...internal
OS
Win11 24H2 IOT LTSC / Win11 Pro 25H2
Computer type
PC/Desktop
Manufacturer/Model
Gigabyte x2 / Asus = Home builds
CPU
AMD Ryzen 7 8700G / Ryzen 7 8700G / Ryzen 8600G
Motherboard
Gigabyte B650 AORUS ELITE AX V2 / ASUS TUF GAMING B650-PLUS / B650 GAMING X AX V2
Memory
F5-6000J3636F16GX2-FX5 32GB / Lexar Ares RGB LD5BU016G-R6000GDLA 32GB / Kingston FURY Beast 32 GB DDR5-5600
Graphics Card(s)
internal
Sound Card
Realtek
Monitor(s) Displays
BenQ 27 L EW2780
Screen Resolution
1920x1080
Hard Drives
Many M.2's (WD)
PSU
be quiet! Pure Power 13 M 550W
Case
Chieftec HC-10B-OP
Cooling
Gelid Solutions Tranquillo 5, many Noctua's 12x12
Keyboard
Microsoft
Mouse
Cherry
Internet Speed
500 mbs
Browser
Vivaldi
Antivirus
Eset
Other Info
PC builder / repair / Trouble-shooter etc.
anchamp65 said:
No, leave it there, it avoids any questionning is it good or not
Click to expand...

If it's allowed, it'll be blank. If it's banned it'll say so.
Or run it in -verbose mode and it'll say either way.
 

My Computers My Computers

System One System Two Other systems

  • At a glance

    Win 11 Pro 25H2 26200.8973Intel® Core™ i7-14700KG.SKILL Ripjaws S5 Series 64GB (2 x 32GB) DDR5ASUS GeForce RTX 4070 Super 12GB
    OS
    Win 11 Pro 25H2 26200.8973
    Computer type
    PC/Desktop
    Manufacturer/Model
    Self Built
    CPU
    Intel® Core™ i7-14700K
    Motherboard
    ASUS TUF Z690-PLUS WIFI (BIOS 4505)
    Memory
    G.SKILL Ripjaws S5 Series 64GB (2 x 32GB) DDR5
    Graphics Card(s)
    ASUS GeForce RTX 4070 Super 12GB
    Sound Card
    Sound Blaster AE-5 Plus
    Monitor(s) Displays
    ASUS TUF Gaming 27" 2K HDR Gaming
    Screen Resolution
    2560 x 1440
    Hard Drives
    Samsung 990 Pro 1TB NVMe (Win 11 25H2)
    SK hynix P41 500GB NVMe
    SK hynix P41 2TB NVMe (x3)
    Crucial P3 Plus 4TB
    PSU
    Corsair RM850x Shift
    Case
    Antec Dark Phantom DP502 FLUX
    Cooling
    Corsair Nautilus 360 RS AIO
    Keyboard
    Logitech MK 320
    Mouse
    Razer Basilisk V3
    Internet Speed
    750Mbs
    Browser
    Firefox
    Antivirus
    Winows Security
    Other Info
    MR 8.1 Home

  • At a glance

    Win 11 Pro 25H2 26200.8973Intel Core i5-1140064 GB DDR4MSI GeForce RTX 3060 Ventus 2X 12GB
    Operating System
    Win 11 Pro 25H2 26200.8973
    Computer type
    PC/Desktop
    Manufacturer/Model
    Self Built
    CPU
    Intel Core i5-11400
    Motherboard
    Asus TUF Gaming Z590 Plus WiFi (BIOS 2803)
    Memory
    64 GB DDR4
    Graphics card(s)
    MSI GeForce RTX 3060 Ventus 2X 12GB
    Sound Card
    SoundBlaster Audigy Fx V2
    Monitor(s) Displays
    Samsung F27T350
    Screen Resolution
    1920x1080
    Hard Drives
    Samsung 980 Pro 1TB
    Samsung 970 EVO Plus 2TB
    Samsung 870 EVO 500GB SSD
    PSU
    Corsair HX750
    Case
    Cougar MX330-G Window
    Cooling
    Thermalright Frozen Edge 240 Black AIO
    Internet Speed
    350Mbps
    Browser
    Firefox
    Antivirus
    Windows Security
  • System Three
    Win 11 Pro 25H2 26200.8973
    ASUS PRIME Z370-P II BIOS 3004 7/12/21
    Intel Core i7-8700 CPU @ 3.20GHz
    32GB DDR4 RAM (4x8)
    iGPU Intel UHD Graphics 630
    Cooler Master Hyper 212
    Mid-Tower Desktop
Scott said:
If it's allowed, it'll be blank. If it's banned it'll say so.
Or run it in -verbose mode and it'll say either way.
Click to expand...
ok, then maybe have the "banned" written in red
so no red, all good !

make sens ?
 

My Computer My Computer

At a glance

Windows 11
OS
Windows 11
Proposed normal mode:
Code: 
Macrium v8.0.7783
-----------------
    WinRE Boot Manager [Production PCA 2011] is BANNED.
    WinPE Boot File [Production PCA 2011] is BANNED.

Hasleo 5.8.2.2
--------------
    C:\Program Files\Hasleo\Hasleo Backup Suite\bin\WADK\Windows Preinstallation Environment\amd64\winpe.wim:1 (WinPE 26100.1)
        Boot Manager [Windows UEFI CA 2023] is BANNED.
        winload.efi (26100.1)

    WinPE Boot Manager [Windows UEFI CA 2023] is BANNED.

Bootable Media
--------------
USB Drive D: "ESD-ISO"
    Boot File [Microsoft Corporation UEFI CA 2011]

    boot.wim:2 (WinPE 26100.8873)
        Boot Manager [Windows UEFI CA 2023]
        winload.efi (26100.8870)

    boot.stl is CURRENT.

    install.esd:1 (W11 25H2 26200.8873)
        Boot Manager [Windows UEFI CA 2023]
        winload.efi (26100.8870)

DVD Drive E: "CCCOMA_X64FRE_EN-US_DV9"
    Boot File [Production PCA 2011] is BANNED.

    boot.wim:2 (WinPE 19041.2965)
        Boot Manager [Production PCA 2011] is BANNED.
        winload.efi (19041.2965)

    install.wim:1 (Windows 22H2 19045.2965)
        Boot Manager [Production PCA 2011] is BANNED.
        winload.efi (19041.2965)

Verbose mode
Code: 
Macrium v8.0.7783
-----------------
    WinRE Boot Manager [Production PCA 2011] is BANNED.
        c:\boot\macrium\WinREFiles\media\EFI\Microsoft\Boot\bootmgfw.efi
        File Version: 28000.352, SVN 9.0

    WinPE Boot File [Production PCA 2011] is BANNED.
        c:\boot\macrium\\WA11KFiles\media\EFI\Boot\bootx64.efi
        File Version: 22621.1702, SVN 1.0

Hasleo 5.8.2.2
--------------
    C:\Program Files\Hasleo\Hasleo Backup Suite\bin\WADK\Windows Preinstallation Environment\amd64\winpe.wim:1 (WinPE 26100.1)
        Boot Manager [Windows UEFI CA 2023] is BANNED.
            \Windows\Boot\EFI_EX\bootmgfw_EX.efi
            File Version: 26089.1001, SVN 2.0

        \Windows\System32\winload.efi is ALLOWED.
            File Version: 26100.1

    WinPE Boot Manager [Windows UEFI CA 2023] is BANNED.
        C:\Program Files\Hasleo\Hasleo Backup Suite\bin\WADK\Boot\EFI_EX\bootmgfw.efi
        File Version: 26100.30227, SVN 7.0

Bootable Media
--------------
USB Drive D: "ESD-ISO"
    Boot File [Microsoft Corporation UEFI CA 2011] is ALLOWED.
        D:\EFI\Boot\bootx64.efi
        [THIRD-PARTY] EFI File

    boot.wim:2 (WinPE 26100.8873)
        Boot Manager [Windows UEFI CA 2023] is ALLOWED.
            \Windows\Boot\EFI_EX\bootmgfw_EX.efi
            File Version: 28000.352, SVN 9.0

        \Windows\System32\winload.efi is ALLOWED.
            File Version: 26100.8870

    D:\EFI\Microsoft\Boot\boot.stl [5/18/2026 10:44 AM] is CURRENT.

    install.esd:1 (W11 25H2 26200.8873)
        Boot Manager [Windows UEFI CA 2023] is ALLOWED.
            \Windows\Boot\EFI_EX\bootmgfw_EX.efi
            File Version: 28000.352, SVN 9.0

        \Windows\System32\winload.efi is ALLOWED.
            File Version: 26100.8870

DVD Drive E: "CCCOMA_X64FRE_EN-US_DV9"
    Boot File [Production PCA 2011] is BANNED.
        E:\EFI\Boot\bootx64.efi
        File Version: 19041.2965, SVN 1.0

    boot.wim:2 (WinPE 19041.2965)
        Boot Manager [Production PCA 2011] is BANNED.
            \Windows\Boot\EFI\bootmgfw.efi
            File Version: 19041.2965, SVN 1.0

        \Windows\System32\winload.efi is ALLOWED.
            File Version: 19041.2965

    install.wim:1 (Windows 22H2 19045.2965)
        Boot Manager [Production PCA 2011] is BANNED.
            \Windows\Boot\EFI\bootmgfw.efi
            File Version: 19041.2965, SVN 1.0

        \Windows\System32\winload.efi is ALLOWED.
            File Version: 19041.2965
 

My Computer My Computer

At a glance

Windows 7
OS
Windows 7
anchamp65 said:
ok, then maybe have the "banned" written in red
so no red, all good !

make sens ?
Click to expand...
I don't like colored text because you can't copy/paste a color to a thread post. Also colors require you to use a different PS print function, which cannot be redirected back into a log file. I'd have to rewrite the entire logging system from scratch.

Some of you already post entire screenshots, which work OK for a small listing, but once the window gets too big, it's not practical to read a a screenshot that requires you to scroll an image up and down.
 

My Computer My Computer

At a glance

Windows 7
OS
Windows 7
garlin said:
I don't like colored text because you can't copy/paste a color to a thread post. Also colors require you to use a different PS print function, which cannot be redirected back into a log file. I'd have to rewrite the entire logging system from scratch.

Some of you already post entire screenshots, which work OK for a small listing, but once the window gets too big, it's not practical to read a a screenshot that requires you to scroll an image up and down.
Click to expand...
ok, makes sens
verbose it is
Thanks Garlin
 

My Computer My Computer

At a glance

Windows 11
OS
Windows 11
Would a 3rd-option work for the dissenters?

Normal: is ALLOWED
Quiet: (nothing)
Verbose: is ALLOWED

The reason the script originally printed so much text was to avoid any possible confusion. You wouldn't assume any detail was good or bad, it was always stated for you. But now I can see if you got lots of drives to check, the output gets painful to read.
 

My Computer My Computer

At a glance

Windows 7
OS
Windows 7
Normal, Quiet, and Verbose seems like the best plan.
 

My Computer My Computer

At a glance

Windows 11 ProIntel Core Ultra16GBIntel(R) Arc Graphics
OS
Windows 11 Pro
Computer type
Laptop
Manufacturer/Model
ASUS Zenbook 14 OLED
CPU
Intel Core Ultra
Memory
16GB
Graphics Card(s)
Intel(R) Arc Graphics
Sound Card
Realtek High Definition Audio(SST)
Screen Resolution
2880 x 1800
Hard Drives
500 GB NVMe SSD
Internet Speed
1,500Mbps
Browser
Firefox, Edge
Antivirus
Windows Defender
Had to look that word up in the wikipedia, nah keep it simple man ! :cool:
Use the code that's easy for you.
 

My Computer My Computer

At a glance

Win11 24H2 IOT LTSC / Win11 Pro 25H2AMD Ryzen 7 8700G / Ryzen 7 8700G / Ryzen 8600GF5-6000J3636F16GX2-FX5 32GB / Lexar Ares RGB ...internal
OS
Win11 24H2 IOT LTSC / Win11 Pro 25H2
Computer type
PC/Desktop
Manufacturer/Model
Gigabyte x2 / Asus = Home builds
CPU
AMD Ryzen 7 8700G / Ryzen 7 8700G / Ryzen 8600G
Motherboard
Gigabyte B650 AORUS ELITE AX V2 / ASUS TUF GAMING B650-PLUS / B650 GAMING X AX V2
Memory
F5-6000J3636F16GX2-FX5 32GB / Lexar Ares RGB LD5BU016G-R6000GDLA 32GB / Kingston FURY Beast 32 GB DDR5-5600
Graphics Card(s)
internal
Sound Card
Realtek
Monitor(s) Displays
BenQ 27 L EW2780
Screen Resolution
1920x1080
Hard Drives
Many M.2's (WD)
PSU
be quiet! Pure Power 13 M 550W
Case
Chieftec HC-10B-OP
Cooling
Gelid Solutions Tranquillo 5, many Noctua's 12x12
Keyboard
Microsoft
Mouse
Cherry
Internet Speed
500 mbs
Browser
Vivaldi
Antivirus
Eset
Other Info
PC builder / repair / Trouble-shooter etc.
I have been using your scripts sinds March 12 and never had a problem with it.
 

My Computer My Computer

At a glance

Win11 24H2 IOT LTSC / Win11 Pro 25H2AMD Ryzen 7 8700G / Ryzen 7 8700G / Ryzen 8600GF5-6000J3636F16GX2-FX5 32GB / Lexar Ares RGB ...internal
OS
Win11 24H2 IOT LTSC / Win11 Pro 25H2
Computer type
PC/Desktop
Manufacturer/Model
Gigabyte x2 / Asus = Home builds
CPU
AMD Ryzen 7 8700G / Ryzen 7 8700G / Ryzen 8600G
Motherboard
Gigabyte B650 AORUS ELITE AX V2 / ASUS TUF GAMING B650-PLUS / B650 GAMING X AX V2
Memory
F5-6000J3636F16GX2-FX5 32GB / Lexar Ares RGB LD5BU016G-R6000GDLA 32GB / Kingston FURY Beast 32 GB DDR5-5600
Graphics Card(s)
internal
Sound Card
Realtek
Monitor(s) Displays
BenQ 27 L EW2780
Screen Resolution
1920x1080
Hard Drives
Many M.2's (WD)
PSU
be quiet! Pure Power 13 M 550W
Case
Chieftec HC-10B-OP
Cooling
Gelid Solutions Tranquillo 5, many Noctua's 12x12
Keyboard
Microsoft
Mouse
Cherry
Internet Speed
500 mbs
Browser
Vivaldi
Antivirus
Eset
Other Info
PC builder / repair / Trouble-shooter etc.
Klaver7 said:
It's also responsible for Webview2
Click to expand...

What I do is just download a new version of webview2 then update manually from this site.

Normally get the middle download then run as admin.

Microsoft Edge WebView2 | Microsoft Edge Developer

developer.microsoft.com developer.microsoft.com

You can see what version you have by looking at the name of the folder which is the name of the version installed.

C:\Program Files (x86)\Microsoft\EdgeWebView\Application
 

My Computer My Computer

At a glance

Windows 11 Pro
OS
Windows 11 Pro
You must log in or register to reply here.

Similar threads

Solved Successful manual update of Secure Boot on Dell XPS8930 with older BIOS that will never update.
2
Replies
23
Views
4K
trabel
T
Secure Boot Update Issue for 2014 Dell Laptop
Replies
7
Views
2K
SIW2
SIW2

Latest Support Threads

Latest Tutorials

Back
Top Bottom