Solved garlin's PowerShell scripts for updating Secure Boot CA 2023

andyc56 said:

Not sure if this is the same problem, but in Macrium Reflect Free, when choosing to save a Rescue Image as ISO, pressing Ctrl reveals a down arrow on the Build button as below.

View attachment 180938

Clicking the down arrow reveals a "Force WIM Rebuild" option. Choosing that has worked for me, together with Garlin's script to update the boot media after burning the ISO.

Click to expand...

Thanks although rebuilding doesn't seem to do anything

That's the boot files, which are a separate thing than the boot.wim's actual contents. You need everything to line up (ISO boot file, boot.wim contents).

Klaver7 said:

@KevTech Oh and what is this:

View attachment 180942

Click to expand...

Not sure what you're trying to convey here...

KevTech said:

No Macrium does not have this option yet for RE media it is only available for PE.

View attachment 180939

View attachment 180940

I contacted Macrium about this and their response is at this post: garlin's PowerShell scripts for updating Secure Boot CA 2023

Click to expand...

Reading the link it seems Garlins script does the same thing.

Yes and you will end up with:


Several way's possible to get the same results

Klaver7 said:

Yes and you will end up with:

Code:

 ID_FILEATTRIB_F_0043 10.0.29426.0       65535.65535.65535.65535



Macrium v10.0.8843
------------------
    WinRE Boot Manager [Windows UEFI CA 2023] is ALLOWED.
        c:\boot\macrium\WinREFiles\media\EFI\Microsoft\Boot\bootmgfw.efi
        File Version: 28000.352, SVN 9.0

Bootable Media
--------------

USB Drive F: "TBWINRE"
    Windows Boot Manager [Windows UEFI CA 2023] is ALLOWED.
        F:\EFI\Microsoft\Boot\bootmgfw.efi
        File Version: 28000.352, SVN 9.0

    boot.wim:1 (WinRE 26100.9168)
        Boot Manager [Windows UEFI CA 2023] is ALLOWED.
            \Windows\Boot\EFI_EX\bootmgfw_EX.efi
            File Version: 28000.352, SVN 9.0

        \Windows\System32\winload.efi is ALLOWED.
            File Version: 26100.9168


PS C:\Users\

Several way's possible to get the same result

Click to expand...

I perform:
make an ISO(dummy), then run:
copy C:\Windows\Boot\EFI_EX\bootmgfw_EX.efi c:\boot\macrium\WinREFiles\media\EFI\Boot\bootx64.efi
copy C:\Windows\Boot\EFI_EX\bootmgfw_EX.efi c:\boot\macrium\WinREFiles\media\EFI\Microsoft\Boot\bootmgfw.efi

Create USB and I get:
Macrium v10.0.8750
------------------
WinRE Boot Manager [Windows UEFI CA 2023] is ALLOWED.
c:\boot\macrium\WinREFiles\media\EFI\Microsoft\Boot\bootmgfw.efi
File Version: 28000.352, SVN 9.0

WinPE Boot File [Windows UEFI CA 2023] is BANNED.
c:\boot\macrium\WA11KFiles\media\EFI\Boot\bootx64.efi
File Version: 26100.30227, SVN 7.0

Bootable Media
--------------

USB Drive I: "8 GB"
Windows Boot Manager [Windows UEFI CA 2023] is ALLOWED.
I:\EFI\Microsoft\Boot\bootmgfw.efi
File Version: 28000.352, SVN 9.0

boot.wim:1 (WinRE 26100.7014)
Boot Manager [Windows UEFI CA 2023] is BANNED. WHY DO I GET THIS?
\Windows\Boot\EFI_EX\bootmgfw_EX.efi
File Version: 26100.30227, SVN 7.0

\Windows\System32\winload.efi will be ALLOWED.
File Version: 26100.7014

Do you get this reading with: powershell -nop -ep bypass -f E:\Z_c2023\Check_UEFI-CA2023.ps1 -audit -verbose