Solved garlin's PowerShell scripts for updating Secure Boot CA 2023


PowerShell 7.6.0
PS C:\Users\neldog\Documents\Computer Files\Dell Tower Plus EBT2250\Secure Boot UEFI\New Garlin Scripts\New Garlin Jan 15> .\Check_UEFI-CA2023.ps1 -BootMedia
Secure Boot: ON
Virtualization Based Security: ON
BitLocker on (C:) OFF

UEFI KEK Certs
--------------
Microsoft Corporation KEK CA 2011
Microsoft Corporation KEK 2K CA 2023

UEFI DB Certs
-------------
Microsoft Corporation UEFI CA 2011
Microsoft Windows Production PCA 2011
Microsoft Option ROM UEFI CA 2023
Microsoft UEFI CA 2023
Windows UEFI CA 2023

UEFI DBX Certs
--------------
Microsoft Windows PCA 2010
Microsoft Windows Production PCA 2011
Windows BootMgr SVN 7.0

EFI Files
---------
Disk 0: Windows Boot Manager [Windows UEFI CA 2023] is ALLOWED.

Registry: WindowsUEFICA2023Capable = 2
[Windows UEFI CA 2023] in UEFI DB, and Windows starting from CA 2023 Boot Manager.

Disk 0: SkuSiPolicy.p7b (for VBS) is CURRENT.

Bootable Media
--------------
USB Drive D: "MACRIUM"
Boot File [Windows UEFI CA 2023] is ALLOWED.
USB Drive E: "26200-8037"
Boot File [Windows UEFI CA 2023] is ALLOWED.
boot.wim:2 Boot Manager [Windows UEFI CA 2023] is PRESENT.
install.swm:1 Boot Manager [Windows UEFI CA 2023] is PRESENT.
Skipping checks on next 6 install.swm images.

STATUS REPORT
-------------
Registry: UEFICA2023Status = Updated

SUCCESS: NO UPDATES ARE REQUIRED.
 

My Computers My Computers

System One System Two

  • At a glance

    Windows 11 Pro 26H2 26300.9711Intel® Core™ Ultra 7 265 1.8GHz to 5.3GHz (Ar...SK Hynix 32GB DDR5 5600 Desktop RAM UDIMM Non...Dell NVIDIA® GeForce RTX™ 4060 8GB GDDR6 & (i...
    OS
    Windows 11 Pro 26H2 26300.9711
    Computer type
    PC/Desktop
    Manufacturer/Model
    Dell Tower Plus EBT2250, DOB: 06/15/2025
    CPU
    Intel® Core™ Ultra 7 265 1.8GHz to 5.3GHz (Arrow Lake)
    Motherboard
    Dell Inc. 02D3NT A00 (U3E1)
    Memory
    SK Hynix 32GB DDR5 5600 Desktop RAM UDIMM Non-ECC PC5-5600B
    Graphics Card(s)
    Dell NVIDIA® GeForce RTX™ 4060 8GB GDDR6 & (iGPU) Integrated Intel® UHD Graphics
    Sound Card
    Chipset Realtek High-Definition Audio with Dolby Atmos
    Monitor(s) Displays
    Dell Ultra Sharp U2515H 25-Inch Screen LED-Lit
    Screen Resolution
    2560 X 1440
    Hard Drives
    Samsung (NVMe PM9C1a 1024GB) M.2 PCIe NVMe Solid State Drive (OS), with Samsung Piccolo (S4LY022) 6-Core 4 Channel Controller.

    Samsung T7 500GB SSD, USB-C External Drive
    PSU
    Dell 460W
    Case
    Dell Tower Plus EBT 2250
    Cooling
    Fan
    Keyboard
    Dell Wired Keyboard - KB216
    Mouse
    Logitech M510
    Internet Speed
    Intel Killer E3100G 2.5 Gigabit Ethernet Controller
    Browser
    Microsoft Edge
    Antivirus
    Microsoft Windows Security

  • At a glance

    Windows 11 Pro 26H2 26300.971110th Generation Intel Core i7-10510U Processo...16GB DDR4 RAMNVIDIA® GeForce® MX250 with 2GB GDDR5 graphic...
    Operating System
    Windows 11 Pro 26H2 26300.9711
    Computer type
    Laptop
    Manufacturer/Model
    Dell Inspiron 15 7000 (7591) 2-in-1, DOB: 11/30/2019
    CPU
    10th Generation Intel Core i7-10510U Processor (8MB Cache, up to 4.9 GHz) Comet Lake
    Motherboard
    Dell 0NNW5N
    Memory
    16GB DDR4 RAM
    Graphics card(s)
    NVIDIA® GeForce® MX250 with 2GB GDDR5 graphics memory
    Sound Card
    Chipset Realtek ALC3254
    Monitor(s) Displays
    Dell 15.6-inch UHD Truelife Touch Narrow Border WVA Display with Active Pen support
    Screen Resolution
    3840 x 2160
    Hard Drives
    Intel NVME 512GB SSD with 32GB Intel Optane Memory, M.2 80mm PCIe 3.0 RAID

    SanDisk 256GB Extreme microSDXC UHS-I Memory Card
    PSU
    Dell 4-Cell Battery, 68 Whr (Integrated), 90 Watt AC Adapter
    Case
    Dell Inspiron 15 7000 2-in-1 (7591)
    Cooling
    Standard Dell Case Fan & Havit HV-F2056 USB Powered (3 Fans) Laptop Cooling Pad.
    Keyboard
    Dell
    Mouse
    Logitech Wireless Mouse M650L
    Internet Speed
    Wireless/Wired connectivity (WiFi 6 - 802.11 ax)
    Browser
    Microsoft Edge
    Antivirus
    Microsoft Windows Security
gunrunnerjohn said:
Is this still limited to things like Windows recovery disks, etc.? I believe you mentioned in the past that it can't deal with non-standard boot disks that have their files in other locations?
Click to expand...
Try it again, I've changed the update script to account for the two type of boot drives.

For WinPE drives, it only replaces the bootx64.efi
For WinRE drives, it uses bcdboot to replace the entire folder.
 

My Computer My Computer

At a glance

Windows 7
OS
Windows 7
Hi @garlin. After lots of e-mails with Acer, they finally updated their Secure Boot certificate page and now list my as well as other Acer laptop models due for a BIOS update in the coming months. Thanks for the script still.
 

My Computer My Computer

At a glance

Windows 11 Pro 25H2Intel Core i7-11800H16GB (2x8 GB)RTX 3060 Laptop GPU
OS
Windows 11 Pro 25H2
Computer type
Laptop
Manufacturer/Model
Acer Predator Helios 300 PH314-54-72ZJ
CPU
Intel Core i7-11800H
Motherboard
TGL
Memory
16GB (2x8 GB)
Graphics Card(s)
RTX 3060 Laptop GPU
Sound Card
Realtek ALC295
Monitor(s) Displays
1
Screen Resolution
2560 x 1440 @ 165Hz
Hard Drives
1TB NVMe SSD, 512GB NVMe SSD, 1TB 7200 RPM HDD
Cooling
Aeroblade 5th Gen 3D fan
Keyboard
RGB Laptop keyboard
Mouse
Logitech Lightsync G203
Internet Speed
175 Mbps up/175 Mbps down
Browser
Firefox with uBlock Origin and YouTube enhancing extensions..
Antivirus
Windows Security with Core Isolation on
HuntyFtw said:
Hi @garlin. After lots of e-mails with Acer, they finally updated their Secure Boot certificate page and now list my as well as other Acer laptop models due for a BIOS update in the coming months. Thanks for the script still.
Click to expand...
Some OEM's are still delivering last-minute BIOS updates. I can see their activity on MS's GitHub repo.

Unfortunately, Dell and HP have declared they're not longer making updates for older PC's. The actual work to add new certs isn't too hard, but it's the testing effort that discourages most vendors.
 

My Computer My Computer

At a glance

Windows 7
OS
Windows 7
garlin said:
Some OEM's are still delivering last-minute BIOS updates. I can see their activity on MS's GitHub repo.

Unfortunately, Dell and HP have declared they're not longer making updates for older PC's. The actual work to add new certs isn't too hard, but it's the testing effort that discourages most vendors.
Click to expand...
Did you see any word from Lenovo? Not that it matters since I got the certs installed using your scripts. ;-)(y)
 

My Computers My Computers

System One System Two

  • At a glance

    Windows 11 Pro 26H2i7-8565U16GBIntel UHD Graphics 620
    OS
    Windows 11 Pro 26H2
    Computer type
    Laptop
    Manufacturer/Model
    Lenovo T490 (2020 Hardware)
    CPU
    i7-8565U
    Motherboard
    20N20028US
    Memory
    16GB
    Graphics Card(s)
    Intel UHD Graphics 620
    Sound Card
    Realtec Audio
    Monitor(s) Displays
    ASUS VE248
    Screen Resolution
    1920 X 1080
    Hard Drives
    Samsung SSD 970 PRO 512GB NVMe
    Internet Speed
    Frontier fiber 1GB
    Browser
    Chrome, Firefox, Edge
    Antivirus
    Norton 360 Deluxe Plus
    Other Info
    Supported hardware, upgraded from Windows 10 Pro to Windows 11 Pro version 24H2 on 06/01/2025 using the Windows 11 ISO file. Used the enablement package to upgrade to version 25H2 on 10/07/2025. Secure boot enabled. Secure Boot CA 2023 updated.

  • At a glance

    Windows 11 Pro 26H2i7-4770 (with SSE4.2, and POPCNT)16GBIntel HD Graphics 4600
    Operating System
    Windows 11 Pro 26H2
    Computer type
    PC/Desktop
    Manufacturer/Model
    Lenovo ThinkCentre M83 (2014 Hardware)
    CPU
    i7-4770 (with SSE4.2, and POPCNT)
    Motherboard
    10AL000GUS
    Memory
    16GB
    Graphics card(s)
    Intel HD Graphics 4600
    Sound Card
    Realtec High Definition Audio
    Monitor(s) Displays
    ASUS VE248
    Screen Resolution
    1920 X 1080
    Hard Drives
    Samsung SSD 860 PRO 1TB SATA
    Internet Speed
    Frontier fiber 1GB
    Browser
    Chrome, Firefox, Edge
    Antivirus
    Norton 360 Deluxe Plus
    Other Info
    Unsupported hardware, upgraded from Windows 10 Pro (TPM 1.2 & unsupported CPU, but does have SSE4.2, and POPCNT) to Windows 11 Pro version 24H2 on 06/15/2025. Added Registry Key HKEY_LOCAL_MACHINE\SYSTEM\Setup\MoSetup – AllowUpgradesWithUnsupportedTPMOrCPU=1 to allow installation using the Windows 11 ISO file. Used the enablement package to upgrade to version 25H2 on 10/08/2025. Secure boot enabled. Secure Boot CA 2023 updated.
garlin said:
Some OEM's are still delivering last-minute BIOS updates. I can see their activity on MS's GitHub repo.

Unfortunately, Dell and HP have declared they're not longer making updates for older PC's. The actual work to add new certs isn't too hard, but it's the testing effort that discourages most vendors.
Click to expand...
What does HP consider older? My laptop is from 2022.
 

My Computer My Computer

At a glance

Windows 11 Pro 25H2Gen 11 Core i516GB
OS
Windows 11 Pro 25H2
Computer type
Laptop
Manufacturer/Model
HP
CPU
Gen 11 Core i5
Memory
16GB
https://support.hp.com/ie-en/document/ish_13070353-13070429-16
  • HP PCs released 2024 and later already ship with the necessary support for the new certificates and do not require a BIOS update related to this change.
  • HP PCs released between 2022 to 2023 received a BIOS update on or around September 30, 2025.
  • HP PCs released between 2018 to 2021 received a BIOS update on or around December 31, 2025.
  • Platforms released in 2017 and earlier do not receive a BIOS update related to this change, because HP no longer supports those platforms.
 

My Computer My Computer

At a glance

Windows 7
OS
Windows 7
nikki605 said:
Did you see any word from Lenovo? Not that it matters since I got the certs installed using your scripts. ;-)(y)
Click to expand...
The last check-in from Lenovo was 11 months ago, but they submitted a boatload of KEK's for all the different PK's they own. I would imagine they consider themselves done, so don't expect more PC's to be added.
 

My Computer My Computer

At a glance

Windows 7
OS
Windows 7
garlin said:
https://support.hp.com/ie-en/document/ish_13070353-13070429-16
  • HP PCs released 2024 and later already ship with the necessary support for the new certificates and do not require a BIOS update related to this change.
  • HP PCs released between 2022 to 2023 received a BIOS update on or around September 30, 2025.
  • HP PCs released between 2018 to 2021 received a BIOS update on or around December 31, 2025.
  • Platforms released in 2017 and earlier do not receive a BIOS update related to this change, because HP no longer supports those platforms.
Click to expand...
Well that Bios Update they released for mine didn't do anything for the new DEFAULT certificates except the Windows one.



11 April 2026
Manufacturer: HP
Model: HP Pavilion Laptop 15-eg0xxx
BIOS: Insyde, F.51, F.51, HPQOEM - 2
Windows version: 25H2 (Build 26200.8117)

Secure Boot status: Enabled

Current UEFI PK
√ HP UEFI Secure Boot PK 2017

Default UEFI PK
√ HP UEFI Secure Boot PK 2017

Current UEFI KEK √ Microsoft Corporation KEK CA 2011 (revoked: False) √ Microsoft Corporation KEK 2K CA 2023 (revoked: False) √ HP UEFI Secure Boot KEK 2017 (revoked: False) Default UEFI KEK √ Microsoft Corporation KEK CA 2011 (revoked: False) X Microsoft Corporation KEK 2K CA 2023 √ HP UEFI Secure Boot KEK 2017 (revoked: False)

Current UEFI DB
√ Microsoft Windows Production PCA 2011 (revoked: True)
√ Microsoft Corporation UEFI CA 2011 (revoked: False)
√ Windows UEFI CA 2023 (revoked: False)
√ Microsoft UEFI CA 2023 (revoked: False)
√ Microsoft Option ROM UEFI CA 2023 (revoked: False)
√ HP UEFI Secure Boot DB 2017 (revoked: False)

Default UEFI DB
√ Microsoft Windows Production PCA 2011 (revoked: True)
X Microsoft Corporation UEFI CA 2011
√ Windows UEFI CA 2023 (revoked: False)
X Microsoft UEFI CA 2023
X Microsoft Option ROM UEFI CA 2023
√ HP UEFI Secure Boot DB 2017 (revoked: False)

Current UEFI DBX
2025-10-14 (v1.6.0) : SUCCESS: 431 successes detected
Windows Bootmgr SVN : 7.0
Windows cdboot SVN : 3.0
Windows wdsmgfw SVN : 3.0
 

My Computer My Computer

At a glance

Windows 11 Pro 25H2Gen 11 Core i516GB
OS
Windows 11 Pro 25H2
Computer type
Laptop
Manufacturer/Model
HP
CPU
Gen 11 Core i5
Memory
16GB
garlin said:
The last check-in from Lenovo was 11 months ago, but they submitted a boatload of KEK's for all the different PK's they own. I would imagine they consider themselves done, so don't expect more PC's to be added.
Click to expand...
I gave up on Lenovo ever releasing cert updates for the systems I have ...
... (S30 workstation EOL 2017, T530 laptop EOL 2022, P520 workstation EOL 2022).
So I just made a Mosby 3.0 UEFI key with the relevant 2023 certs and unique PK and Mosby-ed all the systems.
If I ever need to rewrite the certs again I'll just use the same Mosby USB key I have used on all my systems
@garlin ' s scripts say I am all fine, booting Win10 and Win11 in UEFI mode with the 2023 cert applied.
Boots and runs Linux 22.04.4 LTS fine too, and Macrium restore disks.
Only thing I have not done is revoke the 2011 certs, I'll let Microsoft do that at some point.
 

My Computers My Computers

System One System Two

  • At a glance

    Win11 26H2 26300.9550Intel XEON W-2245 8c/16t128GB DDR4-2933 ECCNvidia Quadro K4200
    OS
    Win11 26H2 26300.9550
    Computer type
    PC/Desktop
    Manufacturer/Model
    Lenovo P520
    CPU
    Intel XEON W-2245 8c/16t
    Memory
    128GB DDR4-2933 ECC
    Graphics Card(s)
    Nvidia Quadro K4200
    Sound Card
    Bultin
    Monitor(s) Displays
    LCD 24in
    Screen Resolution
    1920x1200
    Hard Drives
    1TB SSD system, 16TB data 3.5in HDD, 16TB backup 3.5in HDD
    PSU
    900W
    Cooling
    Air
    Internet Speed
    1Gb
    Browser
    Firefox & Chrome
    Antivirus
    MalwareBytes

  • At a glance

    Win10 22H2Intel Core i7-3520m16GBintegrated CPU graphics
    Operating System
    Win10 22H2
    Computer type
    Laptop
    Manufacturer/Model
    Lenovo T530
    CPU
    Intel Core i7-3520m
    Memory
    16GB
    Graphics card(s)
    integrated CPU graphics
    Hard Drives
    1TB SSD
    Internet Speed
    1Gb
    Browser
    Fiefox & Chrome
    Antivirus
    Malwarebytes
After you've installed all the CA 2023 certs and switched boot managers, it's not necessary to wait for MS to revoke CA 2011.

The only hassle is checking all the bootable USB drives you have (for Windows install or system recovery), and updating their boot files. Everything that you want to boot from has to get an updated boot file after revocation.

The whole point of revoking is to close the door on Black Lotus-style UEFI rootkits. While the original attacks were targeted at specific individuals, cyber criminals have access to the same exploit and can target anyone.
 

My Computer My Computer

At a glance

Windows 7
OS
Windows 7
garlin said:
Try it again, I've changed the update script to account for the two type of boot drives.

For WinPE drives, it only replaces the bootx64.efi
For WinRE drives, it uses bcdboot to replace the entire folder.
Click to expand...
Cool, I'll have to give it a go.
 

My Computers My Computers

System One System Two Other systems

  • At a glance

    Win 11 Pro 26H2, Build 26300.9711Intel Core i5 14500, 14th Generation64GB DDR4GeForce RTX 4060
    OS
    Win 11 Pro 26H2, Build 26300.9711
    Computer type
    PC/Desktop
    Manufacturer/Model
    Home Brew
    CPU
    Intel Core i5 14500, 14th Generation
    Motherboard
    Gigabyte B760M G P WIFI
    Memory
    64GB DDR4
    Graphics Card(s)
    GeForce RTX 4060
    Sound Card
    Chipset Realtek
    Monitor(s) Displays
    LG 45" Ultragear & Acer 24" 1080p
    Screen Resolution
    5120x1440 & 1920x1080
    Hard Drives
    Crucial P310 2TB 2280 PCIe Gen4 3D NAND NVMe M.2 SSD (O/S)
    Silicon Power 2TB US75 NVMe PCIe Gen4 M.2 2280 SSD (backup)
    Crucial BX500 2TB 3D NAND (2nd backup)
    Seagate 4TB Ironwolf, rotating HDD secondary backup
    External off-line backup Drives: 2 NVMe 4TB drives in external enclosures
    PSU
    Thermaltake Toughpower GF3 750W
    Case
    LIAN LI LANCOOL 216 E-ATX PC Case
    Cooling
    Lots of fans!
    Keyboard
    Microsoft Comfort Curve 2000
    Mouse
    Logitech G305
    Internet Speed
    Verizon FiOS 1GB
    Browser
    Firefox
    Antivirus
    MalwareBytes & Windows Defender Security

  • At a glance

    Win 11 Pro 25H2, Build 26300.9550Intel Core i5 1440032GB DDR5Intel 700 Embedded GPU
    Operating System
    Win 11 Pro 25H2, Build 26300.9550
    Computer type
    PC/Desktop
    Manufacturer/Model
    Home Brew
    CPU
    Intel Core i5 14400
    Motherboard
    Gigabyte B760M DS3H AX
    Memory
    32GB DDR5
    Graphics card(s)
    Intel 700 Embedded GPU
    Sound Card
    Realtek Embedded
    Monitor(s) Displays
    27" HP 1080p
    Screen Resolution
    1920x1080
    Hard Drives
    Crucial P310 2TB NVMe Gen4 SSD
    Samsung EVO 990 2TB NVMe Gen4 SSD
    Samsung 2TB SATA SSD
    Seagate 4TB Ironwolf, rotating HDD secondary backup
    PSU
    Thermaltake Smart BM3 650W
    Case
    Okinos Micro ATX Case
    Cooling
    Fans
    Keyboard
    Microsoft Comfort Curve 2000
    Mouse
    Logitech G305
    Internet Speed
    Verizon FiOS 1GB
    Browser
    Firefox
    Antivirus
    Malware Bytes & Windows Defender Security
  • Nimo N171 17" Laptop, (Intel i3-1215U, 16GB RAM, 2TB NVMe, Win11 Pro)
    Acemagic Vista Mini PC V1 (Intel N150, 16GB RAM, 1TB NVMe, Win11 Pro)
    HP ENVY h8-1540t, (24GB RAM, 2TB SSD, 2TB HDD, Win11 Pro)
garlin said:
Unfortunately, Dell and HP have declared they're not longer making updates for older PC's. The actual work to add new certs isn't too hard, but it's the testing effort that discourages most vendors.
Click to expand...
Do you happen to know what Dell consider "older"; my main laptop is from 2021.
 

My Computer My Computer

At a glance

windows 11 Pro11th Gen Intel(R) Core(TM) i7-11800H @ 2.30GH...16 GBNVIDIA GeForce RTX 3050 Ti
OS
windows 11 Pro
Computer type
Laptop
Manufacturer/Model
Dell XPS 15 9510
CPU
11th Gen Intel(R) Core(TM) i7-11800H @ 2.30GHz (16 CPUs
Memory
16 GB
Graphics Card(s)
NVIDIA GeForce RTX 3050 Ti
Hard Drives
512GB Solid State Drive
Browser
Firefox

My Computers My Computers

System One System Two

  • At a glance

    Windows 11 Pro 26H2 26300.9711Intel® Core™ Ultra 7 265 1.8GHz to 5.3GHz (Ar...SK Hynix 32GB DDR5 5600 Desktop RAM UDIMM Non...Dell NVIDIA® GeForce RTX™ 4060 8GB GDDR6 & (i...
    OS
    Windows 11 Pro 26H2 26300.9711
    Computer type
    PC/Desktop
    Manufacturer/Model
    Dell Tower Plus EBT2250, DOB: 06/15/2025
    CPU
    Intel® Core™ Ultra 7 265 1.8GHz to 5.3GHz (Arrow Lake)
    Motherboard
    Dell Inc. 02D3NT A00 (U3E1)
    Memory
    SK Hynix 32GB DDR5 5600 Desktop RAM UDIMM Non-ECC PC5-5600B
    Graphics Card(s)
    Dell NVIDIA® GeForce RTX™ 4060 8GB GDDR6 & (iGPU) Integrated Intel® UHD Graphics
    Sound Card
    Chipset Realtek High-Definition Audio with Dolby Atmos
    Monitor(s) Displays
    Dell Ultra Sharp U2515H 25-Inch Screen LED-Lit
    Screen Resolution
    2560 X 1440
    Hard Drives
    Samsung (NVMe PM9C1a 1024GB) M.2 PCIe NVMe Solid State Drive (OS), with Samsung Piccolo (S4LY022) 6-Core 4 Channel Controller.

    Samsung T7 500GB SSD, USB-C External Drive
    PSU
    Dell 460W
    Case
    Dell Tower Plus EBT 2250
    Cooling
    Fan
    Keyboard
    Dell Wired Keyboard - KB216
    Mouse
    Logitech M510
    Internet Speed
    Intel Killer E3100G 2.5 Gigabit Ethernet Controller
    Browser
    Microsoft Edge
    Antivirus
    Microsoft Windows Security

  • At a glance

    Windows 11 Pro 26H2 26300.971110th Generation Intel Core i7-10510U Processo...16GB DDR4 RAMNVIDIA® GeForce® MX250 with 2GB GDDR5 graphic...
    Operating System
    Windows 11 Pro 26H2 26300.9711
    Computer type
    Laptop
    Manufacturer/Model
    Dell Inspiron 15 7000 (7591) 2-in-1, DOB: 11/30/2019
    CPU
    10th Generation Intel Core i7-10510U Processor (8MB Cache, up to 4.9 GHz) Comet Lake
    Motherboard
    Dell 0NNW5N
    Memory
    16GB DDR4 RAM
    Graphics card(s)
    NVIDIA® GeForce® MX250 with 2GB GDDR5 graphics memory
    Sound Card
    Chipset Realtek ALC3254
    Monitor(s) Displays
    Dell 15.6-inch UHD Truelife Touch Narrow Border WVA Display with Active Pen support
    Screen Resolution
    3840 x 2160
    Hard Drives
    Intel NVME 512GB SSD with 32GB Intel Optane Memory, M.2 80mm PCIe 3.0 RAID

    SanDisk 256GB Extreme microSDXC UHS-I Memory Card
    PSU
    Dell 4-Cell Battery, 68 Whr (Integrated), 90 Watt AC Adapter
    Case
    Dell Inspiron 15 7000 2-in-1 (7591)
    Cooling
    Standard Dell Case Fan & Havit HV-F2056 USB Powered (3 Fans) Laptop Cooling Pad.
    Keyboard
    Dell
    Mouse
    Logitech Wireless Mouse M650L
    Internet Speed
    Wireless/Wired connectivity (WiFi 6 - 802.11 ax)
    Browser
    Microsoft Edge
    Antivirus
    Microsoft Windows Security

My Computer My Computer

At a glance

windows 11 Pro11th Gen Intel(R) Core(TM) i7-11800H @ 2.30GH...16 GBNVIDIA GeForce RTX 3050 Ti
OS
windows 11 Pro
Computer type
Laptop
Manufacturer/Model
Dell XPS 15 9510
CPU
11th Gen Intel(R) Core(TM) i7-11800H @ 2.30GHz (16 CPUs
Memory
16 GB
Graphics Card(s)
NVIDIA GeForce RTX 3050 Ti
Hard Drives
512GB Solid State Drive
Browser
Firefox
trevo said:
Thanks.
Click to expand...

You are very welcome. There is some good information there about Dell computers and Secure Boot BIOS updates.
 

My Computers My Computers

System One System Two

  • At a glance

    Windows 11 Pro 26H2 26300.9711Intel® Core™ Ultra 7 265 1.8GHz to 5.3GHz (Ar...SK Hynix 32GB DDR5 5600 Desktop RAM UDIMM Non...Dell NVIDIA® GeForce RTX™ 4060 8GB GDDR6 & (i...
    OS
    Windows 11 Pro 26H2 26300.9711
    Computer type
    PC/Desktop
    Manufacturer/Model
    Dell Tower Plus EBT2250, DOB: 06/15/2025
    CPU
    Intel® Core™ Ultra 7 265 1.8GHz to 5.3GHz (Arrow Lake)
    Motherboard
    Dell Inc. 02D3NT A00 (U3E1)
    Memory
    SK Hynix 32GB DDR5 5600 Desktop RAM UDIMM Non-ECC PC5-5600B
    Graphics Card(s)
    Dell NVIDIA® GeForce RTX™ 4060 8GB GDDR6 & (iGPU) Integrated Intel® UHD Graphics
    Sound Card
    Chipset Realtek High-Definition Audio with Dolby Atmos
    Monitor(s) Displays
    Dell Ultra Sharp U2515H 25-Inch Screen LED-Lit
    Screen Resolution
    2560 X 1440
    Hard Drives
    Samsung (NVMe PM9C1a 1024GB) M.2 PCIe NVMe Solid State Drive (OS), with Samsung Piccolo (S4LY022) 6-Core 4 Channel Controller.

    Samsung T7 500GB SSD, USB-C External Drive
    PSU
    Dell 460W
    Case
    Dell Tower Plus EBT 2250
    Cooling
    Fan
    Keyboard
    Dell Wired Keyboard - KB216
    Mouse
    Logitech M510
    Internet Speed
    Intel Killer E3100G 2.5 Gigabit Ethernet Controller
    Browser
    Microsoft Edge
    Antivirus
    Microsoft Windows Security

  • At a glance

    Windows 11 Pro 26H2 26300.971110th Generation Intel Core i7-10510U Processo...16GB DDR4 RAMNVIDIA® GeForce® MX250 with 2GB GDDR5 graphic...
    Operating System
    Windows 11 Pro 26H2 26300.9711
    Computer type
    Laptop
    Manufacturer/Model
    Dell Inspiron 15 7000 (7591) 2-in-1, DOB: 11/30/2019
    CPU
    10th Generation Intel Core i7-10510U Processor (8MB Cache, up to 4.9 GHz) Comet Lake
    Motherboard
    Dell 0NNW5N
    Memory
    16GB DDR4 RAM
    Graphics card(s)
    NVIDIA® GeForce® MX250 with 2GB GDDR5 graphics memory
    Sound Card
    Chipset Realtek ALC3254
    Monitor(s) Displays
    Dell 15.6-inch UHD Truelife Touch Narrow Border WVA Display with Active Pen support
    Screen Resolution
    3840 x 2160
    Hard Drives
    Intel NVME 512GB SSD with 32GB Intel Optane Memory, M.2 80mm PCIe 3.0 RAID

    SanDisk 256GB Extreme microSDXC UHS-I Memory Card
    PSU
    Dell 4-Cell Battery, 68 Whr (Integrated), 90 Watt AC Adapter
    Case
    Dell Inspiron 15 7000 2-in-1 (7591)
    Cooling
    Standard Dell Case Fan & Havit HV-F2056 USB Powered (3 Fans) Laptop Cooling Pad.
    Keyboard
    Dell
    Mouse
    Logitech Wireless Mouse M650L
    Internet Speed
    Wireless/Wired connectivity (WiFi 6 - 802.11 ax)
    Browser
    Microsoft Edge
    Antivirus
    Microsoft Windows Security
neldog said:
You are very welcome. There is some good information there about Dell computers and Secure Boot BIOS updates.
Click to expand...
Indeed. Acer's is bare-bones though sadly.
 

My Computer My Computer

At a glance

Windows 11 Pro 25H2Intel Core i7-11800H16GB (2x8 GB)RTX 3060 Laptop GPU
OS
Windows 11 Pro 25H2
Computer type
Laptop
Manufacturer/Model
Acer Predator Helios 300 PH314-54-72ZJ
CPU
Intel Core i7-11800H
Motherboard
TGL
Memory
16GB (2x8 GB)
Graphics Card(s)
RTX 3060 Laptop GPU
Sound Card
Realtek ALC295
Monitor(s) Displays
1
Screen Resolution
2560 x 1440 @ 165Hz
Hard Drives
1TB NVMe SSD, 512GB NVMe SSD, 1TB 7200 RPM HDD
Cooling
Aeroblade 5th Gen 3D fan
Keyboard
RGB Laptop keyboard
Mouse
Logitech Lightsync G203
Internet Speed
175 Mbps up/175 Mbps down
Browser
Firefox with uBlock Origin and YouTube enhancing extensions..
Antivirus
Windows Security with Core Isolation on
I re-enabled core isolation memory integrity (big fps hit on my cpu) and ran the check again and it says this:

SkuSiPolicy.p7b (for VBS) is MISSING. [OPTIONAL]
 

My Computer My Computer

At a glance

Windows 10
OS
Windows 10
GunnzAkimbo said:
I re-enabled core isolation memory integrity (big fps hit on my cpu) and ran the check again and it says this:

SkuSiPolicy.p7b (for VBS) is MISSING. [OPTIONAL]
Click to expand...
When VBS is enabled, MS recommends a SkuSiPolicy.p7b policy file be copied to the EFI for increased protection.

However, my update script doesn't automatically copy it since some users get boot problems with Insider builds, or some versions of an USB recovery drive (with different boot files). Since I can't predict that beforehand, it's flagged for your attention.

If you don't play with Insider builds or use a Macrium or other USB recovery drives, then it's safe to install the file.
Code: 
Update_UEFI-CA2023.ps1 -SkuSiPolicy

In the case you get locked out, you must temporarily disable Secure Boot mode, boot Windows and manually delete the policy file.
 

My Computer My Computer

At a glance

Windows 7
OS
Windows 7
Have not done anything or even tried and this AM got this Yeah! :D
secure boot 4 13.webp
 

My Computer My Computer

At a glance

Win 11 Pro 26H2 26300 9711Intel Core I9 12900K32 GBNvidia GeForce RTX 3060 24GB
OS
Win 11 Pro 26H2 26300 9711
Computer type
PC/Desktop
Manufacturer/Model
HP Omen45L
CPU
Intel Core I9 12900K
Motherboard
HP 8917
Memory
32 GB
Graphics Card(s)
Nvidia GeForce RTX 3060 24GB
Sound Card
HP
Monitor(s) Displays
2 HP 27 & 23
Screen Resolution
3840x2160
Hard Drives
2 TB Samsung 990 EVO 2 TB Samsung 1 TB SATA ST1000
PSU
HP 800 Watt
Case
HP
Cooling
Water
Keyboard
Logo Tech G 213
Mouse
Logi Tech 502
Browser
FireFox
Antivirus
MS Defender / Malwarebytes Prem.
Other Info
Omen 45 SL purchased from HP 12 2022 - Brother Printer MFC-L2700DW APC 500 Back UPS Macrium Reflect Home 8.1 Secure Boot on with all required certificates.
You must log in or register to reply here.

Similar threads

If you cannot update your PC to MS UEFI CA 2023 certificates, this may be a solution to you.
Replies
7
Views
871
Marie SWE
Marie SWE
Secure Boot Update Issue for 2014 Dell Laptop
Replies
7
Views
3K
SIW2
SIW2

Latest Support Threads

Latest Tutorials

Back
Top Bottom