You need to add the "-BootMedia" option to check the USB drives. Otherwise, you're only reporting for the live Windows system.
My Computer
At a glance
Windows 7
- OS
- Windows 7
Solved garlin's PowerShell scripts for updating Secure Boot CA 2023
- Thread starter garlin
- Start date
- Local time
- 10:09 PM
- Posts
- 417
- OS
- Windows 11 Home, ver 25H2 build 26200.8246
Ah, sorry!! Here is another run at it! Both show version 8 so I'm confused by the blue screen error.
PS C:\Users\theislands> powershell -nop -ep bypass -f C:\temp\Check_UEFI-CA2023.ps1 -bootmedia -verbose
Windows 11 25H2 (26200.8246)
Secure Boot: ON
Virtualization Based Security: OFF
BitLocker on (C:) OFF
BIOS Firmware
-------------
ASUSTeK COMPUTER INC. K30AD_M31AD_M51AD
Version: 0802
Date: 2015-08-02
Factory Default UEFI PK Cert
----------------------------
(NONE)
UEFI PK Cert
------------
Windows OEM Devices PK
Factory Default UEFI KEK Certs
------------------------------
(NONE)
UEFI KEK Certs
--------------
Microsoft Corporation KEK CA 2011
Microsoft Corporation KEK 2K CA 2023
Factory Default UEFI DB Certs
-----------------------------
(NONE)
UEFI DB Certs
-------------
Microsoft Corporation UEFI CA 2011
Microsoft Windows Production PCA 2011
Microsoft Option ROM UEFI CA 2023
Microsoft UEFI CA 2023
Windows UEFI CA 2023
Factory Default UEFI DBX Certs
------------------------------
(NONE)
EFI_CERT_SHA256_GUID Signatures: 0
UEFI DBX Certs
--------------
Microsoft Windows Production PCA 2011
Windows BootMgr SVN 8.0
EFI_CERT_SHA256_GUID Signatures: 439
EFI Files
---------
Windows Boot Manager [Windows UEFI CA 2023] is ALLOWED.
\\.\HarddiskVolume1\EFI\Microsoft\Boot\bootmgfw.efi
File Version: 28000.322, SVN 8.0
Registry: WindowsUEFICA2023Capable = 2
[Windows UEFI CA 2023] in UEFI DB, and Windows starting from CA 2023 Boot Manager.
Bootable Media
--------------
DVD Drive F:
USB Drive G: "MACRIUMBOOT"
Boot File [Windows UEFI CA 2023] is ALLOWED.
G:\EFI\Microsoft\Boot\bootmgfw.efi
File Version: 28000.322, SVN 8.0
STATUS REPORT
-------------
Registry: UEFICA2023Status = Updated
SUCCESS: UPDATES ARE FINISHED. UEFI CA 2023 certs are present, PCA 2011 cert is revoked.
PS C:\Users\theislands>
PS C:\Users\theislands> powershell -nop -ep bypass -f C:\temp\Check_UEFI-CA2023.ps1 -bootmedia -verbose
Windows 11 25H2 (26200.8246)
Secure Boot: ON
Virtualization Based Security: OFF
BitLocker on (C:) OFF
BIOS Firmware
-------------
ASUSTeK COMPUTER INC. K30AD_M31AD_M51AD
Version: 0802
Date: 2015-08-02
Factory Default UEFI PK Cert
----------------------------
(NONE)
UEFI PK Cert
------------
Windows OEM Devices PK
Factory Default UEFI KEK Certs
------------------------------
(NONE)
UEFI KEK Certs
--------------
Microsoft Corporation KEK CA 2011
Microsoft Corporation KEK 2K CA 2023
Factory Default UEFI DB Certs
-----------------------------
(NONE)
UEFI DB Certs
-------------
Microsoft Corporation UEFI CA 2011
Microsoft Windows Production PCA 2011
Microsoft Option ROM UEFI CA 2023
Microsoft UEFI CA 2023
Windows UEFI CA 2023
Factory Default UEFI DBX Certs
------------------------------
(NONE)
EFI_CERT_SHA256_GUID Signatures: 0
UEFI DBX Certs
--------------
Microsoft Windows Production PCA 2011
Windows BootMgr SVN 8.0
EFI_CERT_SHA256_GUID Signatures: 439
EFI Files
---------
Windows Boot Manager [Windows UEFI CA 2023] is ALLOWED.
\\.\HarddiskVolume1\EFI\Microsoft\Boot\bootmgfw.efi
File Version: 28000.322, SVN 8.0
Registry: WindowsUEFICA2023Capable = 2
[Windows UEFI CA 2023] in UEFI DB, and Windows starting from CA 2023 Boot Manager.
Bootable Media
--------------
DVD Drive F:
USB Drive G: "MACRIUMBOOT"
Boot File [Windows UEFI CA 2023] is ALLOWED.
G:\EFI\Microsoft\Boot\bootmgfw.efi
File Version: 28000.322, SVN 8.0
STATUS REPORT
-------------
Registry: UEFICA2023Status = Updated
SUCCESS: UPDATES ARE FINISHED. UEFI CA 2023 certs are present, PCA 2011 cert is revoked.
PS C:\Users\theislands>
My Computers
-
At a glance
Windows 11 Home, ver 25H2 build 26200.8246Intel Core i5 5200U @ 2.20GH4 GBIntel HD Graphics 5500 on board- OS
- Windows 11 Home, ver 25H2 build 26200.8246
- Computer type
- Laptop
- Manufacturer/Model
- Hewlett-Packard Spectre 13-4001 x360 convertable
- CPU
- Intel Core i5 5200U @ 2.20GH
- Motherboard
- Hewlett-Packard 802D
- Memory
- 4 GB
- Graphics Card(s)
- Intel HD Graphics 5500 on board
- Sound Card
- Intel Smart Sound Technology (Intel SST)
- Hard Drives
- Micron 256GB M.2 2280 NGFF SSD MTFDDAV256TBN, (SATA 6.0 Gb/s)
- Keyboard
- Model # G01KB
- Antivirus
- Microsoft Defender
- Other Info
- born on date: 25 Feb 2016
-
At a glance
Win 11 Home 25H2 build 26200.7922Intel Core i7 4th Gen 4790 (3.60GHz), Haswell...Samsung 16 GB DDR3 (8GB in 2 modules)NVIDIA GeForce GTX 760, 3GB, and on-board Int...- Operating System
- Win 11 Home 25H2 build 26200.7922
- Computer type
- PC/Desktop
- Manufacturer/Model
- Asus Desktop model M32AD-US019S (DOM: 6/9/2014 )
- CPU
- Intel Core i7 4th Gen 4790 (3.60GHz), Haswell 22nm Technology, SOCKET 1150
- Motherboard
- H81M-E/M51AD/DP_MB
- Memory
- Samsung 16 GB DDR3 (8GB in 2 modules)
- Graphics card(s)
- NVIDIA GeForce GTX 760, 3GB, and on-board Intel HD Graphics 4600 Rev 6
- Monitor(s) Displays
- HP EliteDisplay E241i LED; HP EliteDisplay E243
- Hard Drives
- Samsung 500GB SSD, 870 EVO (SATA 6.0 )
Micron 250GB SSD, CT250MX500
Toshiba HDD, 3GB (original drive w/PC)
- Case
- ASUS
- Keyboard
- ASUS-------------------------
- Antivirus
- MS Defender
- Other Info
- Additional Laptops:
HEWLETT PACKARD
HP OmniBook X Flip NGAI (Next Gen AI),
Model: 16-as0023dx
PT# B5UH1UA#ABA Product #: B5UH1UA
delivered and setup 7/25/25
16" 2K Touch-Screen Laptop
Intel Core Ultra 7 256V '24 Series 2 - CPU
Boost Clock Frequency 4.8 gigahertz; Neural Processing Unit (NPU) Yes;
16GB Memory, LPDDR5X
1TB SSD PCIe 4.0
Graphics: Intel Arc 140V
1 x HDMI 2.1
1 x Thunderbolt 4
2K Touch-Screen display, LED, IPS; 1920 x 1200 (Full HD+)
USB Ports: 1 x USB-C 3.1, 2 x USB-A 3.1
Wi-Fi 6E
weight 4.15 pounds
DELL
Model:I7591-7483BLK-PUS 2-in-1 (7000 Series)
purchased 12/3/2019,
15.6 inch 2-IN-1;
4K Ultra HD Touch-Screen, 3840 x 2160,
Intel Core i7 10510U CPU 1.80GHz,
16GB RAM DDR4 SDRAM 2400 megahert (2 slots),
dedicated graphics Nvidia GeForce MX250 2 GB Graphics,
PCIe 512GB Intel SSD + 32GB Optane Memory (Intel Optane Memory H10 with solid-state storage),
wireless-AX & Bluetooth
Battery: 68wh, Type 4VGMP 4 cell
I'm really confused now. The two files are the same version.
Run this batch file (from MS). It adds an one-time boot manager entry, which clears the UEFI lock.
UEFI locks can be mandated by Group Policy, so if the SkuSiPolicy file gets replaced or deleted by an attacker, the policy is still in effect.
By clearing the UEFI lock, using a special Windows boot file, it goes back to the less restrictive behavior.
Pay attention when the reboot happens, as you're booting a tiny boot file instead of full Windows. Hit the "Windows" key or F3 to acknowledge you're clearing the lock. Afterwards, it will boot into normal Windows. Now the Macrium drive should be allowed to boot.
My Computer
At a glance
Windows 7
- OS
- Windows 7
I had that blue screen on my older system. Rebuild the boot USB in Macrium, then replace the boot file on the USB. You can use the script there or @garlin's script if it has been fixed. See post #1296.
Last edited:
My Computers
-
At a glance
Windows 11 Pro 24H2Intel i7-1260P 12th Gen 4.7GHz32GB DDR4-3200NVIDIA T550 Laptop GPU- OS
- Windows 11 Pro 24H2
- Computer type
- Laptop
- Manufacturer/Model
- Lenovo P16s Workstation
- CPU
- Intel i7-1260P 12th Gen 4.7GHz
- Memory
- 32GB DDR4-3200
- Graphics Card(s)
- NVIDIA T550 Laptop GPU
- Sound Card
- Realtek Audio
- Monitor(s) Displays
- 16" Laptop Display
- Screen Resolution
- 2560x1600
- Hard Drives
- 2TB Samsung M.2 2280 SSD PCIe 4.0 x 4 NVMe
- Mouse
- Logitech MX Anywhere 2s
- Internet Speed
- 1000 Mb
- Browser
- Firefox
- Antivirus
- Avast
-
At a glance
Windows 11 Pro 24H2i7-6820HQ 6th Gen 3.6 GHz32GB DDR4-2133NVIDIA Quadro M2000M Laptop GPU- Operating System
- Windows 11 Pro 24H2
- Computer type
- Laptop
- Manufacturer/Model
- Lenovo P50 Workstation
- CPU
- i7-6820HQ 6th Gen 3.6 GHz
- Memory
- 32GB DDR4-2133
- Graphics card(s)
- NVIDIA Quadro M2000M Laptop GPU
- Sound Card
- Realtek Audio
- Monitor(s) Displays
- 15.6" Laptop Display
- Screen Resolution
- 1920x1080
- Hard Drives
- 2 x 1TB Samsung M.2 2280 SSD PCIe 3.0 x 4 NVMe
- Cooling
- Dual Fan System
- Mouse
- Logitech MX Anywhere 2s
- Internet Speed
- 1000 Mb
- Browser
- Firefox
- Antivirus
- Avast
@t2s50, I'm still not certain if DBXUpdate2024.bin is "broken".
Plan B is returning to my earliest attempt at reading SVN numbers from a bin file, converting the byte stream into a hex string and doing basic string matches. This isn't as elegant, but hey it works!
Using the old method, we discover what's changed in DBXUpdate2024:
This change is utterly baffling. DBXUpdate2024 is primarily used to add PCA 2011 to the DBX, and you get 3 starting SVN's. Those initial values are irrelevant because the update process says we immediately apply DBXUpdateSVN (and forever in the future) to bump it up.
Since BootMgr SVN is now 8.0 (and 7.0 since Oct 2025), DBXUpdate2024 delivers no benefits for its embedded SVN to jump from 2.0 to 5.0.
The only scenario where changing the number makes sense is because we don't want to install the latest SVN, and allow an older boot manager from before last summer to work again. Which doesn't make a whole lot of sense. I'm going to leave my original code for parsing DBX files alone, but adding a parallel function to handle the new file format for DBXUpdate2024.bin.
Plan B is returning to my earliest attempt at reading SVN numbers from a bin file, converting the byte stream into a hex string and doing basic string matches. This isn't as elegant, but hey it works!
Using the old method, we discover what's changed in DBXUpdate2024:
- Windows BootMgr is SVN 5.0 (previously 2.0)
- CD and WDS are SVN 3.0 (previously 2.0)
This change is utterly baffling. DBXUpdate2024 is primarily used to add PCA 2011 to the DBX, and you get 3 starting SVN's. Those initial values are irrelevant because the update process says we immediately apply DBXUpdateSVN (and forever in the future) to bump it up.
Since BootMgr SVN is now 8.0 (and 7.0 since Oct 2025), DBXUpdate2024 delivers no benefits for its embedded SVN to jump from 2.0 to 5.0.
The only scenario where changing the number makes sense is because we don't want to install the latest SVN, and allow an older boot manager from before last summer to work again. Which doesn't make a whole lot of sense. I'm going to leave my original code for parsing DBX files alone, but adding a parallel function to handle the new file format for DBXUpdate2024.bin.
My Computer
At a glance
Windows 7
- OS
- Windows 7
- Local time
- 4:09 AM
- Posts
- 29
- OS
- Windows11
Thanks for that. I will help him run the Bios update the next time I connect to him. It doesn't seem to have any relevance to the 2023 Certs however.
My Computer
At a glance
Windows11Intel(R) N97, 2000 Mhz, 4 Core(s), 4 Logical16GbIntel(R) UHD Graphics
- OS
- Windows11
- Computer type
- PC/Desktop
- Manufacturer/Model
- Acemagic S1
- CPU
- Intel(R) N97, 2000 Mhz, 4 Core(s), 4 Logical
- Memory
- 16Gb
- Graphics Card(s)
- Intel(R) UHD Graphics
- Sound Card
- (Generic USB Audio)
- Monitor(s) Displays
- 2
- Screen Resolution
- 2560 x 1440 x 59 hertz
- Hard Drives
- Model KPART512GBC2DVT 512Gb
- Local time
- 8:09 PM
- Posts
- 494
- OS
- Windows 11
Yeah, I'm sure you'll be able to use one of the workarounds to update the system UEFI to the 2023 certs. As you are likely aware, there are 3 methods mentioned in this thread to try: BIOS update, run the update script and lastly, put Secure Boot in Setup Mode and try the script again. Failing all that, there's the final option, try Mosby by the developer of Rufus. I think you'll get it updated. Unfortunately, it does not appear to have made the list of supported Lenovo devices:
My Computer
At a glance
Windows 11
- OS
- Windows 11
@SaliesBuzz
While you're fiddling with certs... here's ten points, just for filling out your computer specs.
While you're fiddling with certs... here's ten points, just for filling out your computer specs.
My Computers
-
At a glance
Win 11 Home ♦♦♦26200.8737 ♦♦♦♦♦♦♦25H2AMD Ryzen 7 3700XG.Skill (F4-3200C14D-16GTZKW)EVGA RTX 2070 (08G-P4-2171-KR)- OS
- Win 11 Home ♦♦♦26200.8737 ♦♦♦♦♦♦♦25H2
- Computer type
- PC/Desktop
- Manufacturer/Model
- Built by Ghot® [May 2020]
- CPU
- AMD Ryzen 7 3700X
- Motherboard
- Asus Pro WS X570-ACE (BIOS 5302)
- Memory
- G.Skill (F4-3200C14D-16GTZKW)
- Graphics Card(s)
- EVGA RTX 2070 (08G-P4-2171-KR)
- Sound Card
- Realtek ALC1220P / ALC S1220A
- Monitor(s) Displays
- Dell U3011 30"
- Screen Resolution
- 2560 x 1600
- Hard Drives
- 2x Samsung 860 EVO 500GB,
WD 4TB Black FZBX - SATA III,
WD 8TB Black FZBX - SATA III,
DRW-24B1ST CD/DVD Burner
- PSU
- PC Power & Cooling 750W Quad EPS12V
- Case
- Cooler Master ATCS 840 Tower
- Cooling
- CM Hyper 212 EVO (push/pull)
- Keyboard
- Ducky DK9008 Shine II Blue LED
- Mouse
- Logitech Optical M-100
- Internet Speed
- 300/300
- Browser
- Firefox (latest)
- Antivirus
- Bitdefender Total Security
- Other Info
- Speakers: Klipsch Pro Media 2.1
-
At a glance
Windows XP Pro 32bit w/SP3AMD Athlon 64 X2 5000+ (OC'd @ 3.2Ghz)TWIN2X2048-6400C4DHX (2 x 1GB, DDR2 800)EVGA 256-P2-N758-TR GeForce 8600GT SSC- Operating System
- Windows XP Pro 32bit w/SP3
- Computer type
- PC/Desktop
- Manufacturer/Model
- Built by Ghot® (not in use)
- CPU
- AMD Athlon 64 X2 5000+ (OC'd @ 3.2Ghz)
- Motherboard
- ASUS M2N32-SLI Deluxe Wireless Edition
- Memory
- TWIN2X2048-6400C4DHX (2 x 1GB, DDR2 800)
- Graphics card(s)
- EVGA 256-P2-N758-TR GeForce 8600GT SSC
- Sound Card
- Onboard
- Monitor(s) Displays
- ViewSonic G90FB Black 19" Professional (CRT)
- Screen Resolution
- up to 2048 x 1536
- Hard Drives
- WD 36GB 10,000rpm Raptor SATA
Seagate 80GB 7200rpm SATA
Lite-On LTR-52246S CD/RW
Lite-On LH-18A1P CD/DVD Burner
- PSU
- PC Power & Cooling Silencer 750 Quad EPS12V
- Case
- Generic Beige case, 80mm fans
- Cooling
- ZALMAN 9500A 92mm CPU Cooler
- Keyboard
- Logitech Classic Keybooard 200
- Mouse
- Logitech Optical M-BT96a
- Internet Speed
- 300/300
- Browser
- Firefox 3.x ??
- Antivirus
- Symantec (Norton)
- Other Info
- Still assembled, still runs. Haven't turned it on for 15 years?
March 2021 is too early for Secure Boot updates. Before you try updating it, have them run this script as Admin. It will report the name of an available KEK file, or that none are available.
If none are available, then you can plan ahead for more time.
If none are available, then you can plan ahead for more time.
Code:
powershell -ep bypass -f \some\folder\path\WhatsMyPK.ps1My Computer
At a glance
Windows 7
- OS
- Windows 7
- Local time
- 8:09 PM
- Posts
- 494
- OS
- Windows 11
- Local time
- 10:09 PM
- Posts
- 417
- OS
- Windows 11 Home, ver 25H2 build 26200.8246
I did run the batch file and upon booting from the Macrium USB stick I got the same blue error screen.
Next I rebuilt the Macrium Rescue Disk with WinRE which completed successfully and then I tried to boot from it and was greeted by this screen:
So I hit N and Windows booted normally; but I still can't boot into the Macrium disk.
On the blue screen is the mention of
significant?
My Computers
-
At a glance
Windows 11 Home, ver 25H2 build 26200.8246Intel Core i5 5200U @ 2.20GH4 GBIntel HD Graphics 5500 on board- OS
- Windows 11 Home, ver 25H2 build 26200.8246
- Computer type
- Laptop
- Manufacturer/Model
- Hewlett-Packard Spectre 13-4001 x360 convertable
- CPU
- Intel Core i5 5200U @ 2.20GH
- Motherboard
- Hewlett-Packard 802D
- Memory
- 4 GB
- Graphics Card(s)
- Intel HD Graphics 5500 on board
- Sound Card
- Intel Smart Sound Technology (Intel SST)
- Hard Drives
- Micron 256GB M.2 2280 NGFF SSD MTFDDAV256TBN, (SATA 6.0 Gb/s)
- Keyboard
- Model # G01KB
- Antivirus
- Microsoft Defender
- Other Info
- born on date: 25 Feb 2016
-
At a glance
Win 11 Home 25H2 build 26200.7922Intel Core i7 4th Gen 4790 (3.60GHz), Haswell...Samsung 16 GB DDR3 (8GB in 2 modules)NVIDIA GeForce GTX 760, 3GB, and on-board Int...- Operating System
- Win 11 Home 25H2 build 26200.7922
- Computer type
- PC/Desktop
- Manufacturer/Model
- Asus Desktop model M32AD-US019S (DOM: 6/9/2014 )
- CPU
- Intel Core i7 4th Gen 4790 (3.60GHz), Haswell 22nm Technology, SOCKET 1150
- Motherboard
- H81M-E/M51AD/DP_MB
- Memory
- Samsung 16 GB DDR3 (8GB in 2 modules)
- Graphics card(s)
- NVIDIA GeForce GTX 760, 3GB, and on-board Intel HD Graphics 4600 Rev 6
- Monitor(s) Displays
- HP EliteDisplay E241i LED; HP EliteDisplay E243
- Hard Drives
- Samsung 500GB SSD, 870 EVO (SATA 6.0 )
Micron 250GB SSD, CT250MX500
Toshiba HDD, 3GB (original drive w/PC)
- Case
- ASUS
- Keyboard
- ASUS-------------------------
- Antivirus
- MS Defender
- Other Info
- Additional Laptops:
HEWLETT PACKARD
HP OmniBook X Flip NGAI (Next Gen AI),
Model: 16-as0023dx
PT# B5UH1UA#ABA Product #: B5UH1UA
delivered and setup 7/25/25
16" 2K Touch-Screen Laptop
Intel Core Ultra 7 256V '24 Series 2 - CPU
Boost Clock Frequency 4.8 gigahertz; Neural Processing Unit (NPU) Yes;
16GB Memory, LPDDR5X
1TB SSD PCIe 4.0
Graphics: Intel Arc 140V
1 x HDMI 2.1
1 x Thunderbolt 4
2K Touch-Screen display, LED, IPS; 1920 x 1200 (Full HD+)
USB Ports: 1 x USB-C 3.1, 2 x USB-A 3.1
Wi-Fi 6E
weight 4.15 pounds
DELL
Model:I7591-7483BLK-PUS 2-in-1 (7000 Series)
purchased 12/3/2019,
15.6 inch 2-IN-1;
4K Ultra HD Touch-Screen, 3840 x 2160,
Intel Core i7 10510U CPU 1.80GHz,
16GB RAM DDR4 SDRAM 2400 megahert (2 slots),
dedicated graphics Nvidia GeForce MX250 2 GB Graphics,
PCIe 512GB Intel SSD + 32GB Optane Memory (Intel Optane Memory H10 with solid-state storage),
wireless-AX & Bluetooth
Battery: 68wh, Type 4VGMP 4 cell
- Local time
- 10:09 PM
- Posts
- 417
- OS
- Windows 11 Home, ver 25H2 build 26200.8246
The Boot media section is not now stating that booting from the CA2023 cert is allowed! I wonder what happened there? It was there previously.
I just ran the Update_UEFI-CA2023.ps1 script and it still doesn't show!
I just ran the Update_UEFI-CA2023.ps1 script and it still doesn't show!
Code:
EFI Files
---------
Windows Boot Manager [Windows UEFI CA 2023] is ALLOWED.
\\.\HarddiskVolume1\EFI\Microsoft\Boot\bootmgfw.efi
File Version: 28000.322, SVN 8.0
Registry: WindowsUEFICA2023Capable = 2
[Windows UEFI CA 2023] in UEFI DB, and Windows starting from CA 2023 Boot Manager.
Bootable Media
--------------
USB Drive D: "MACRIUMBOOT"
Boot File [Production PCA 2011] is BANNED
D:\EFI\Microsoft\Boot\bootmgfw.efi
File Version: 28000.322, SVN 8.0
DVD Drive F:
STATUS REPORT
-------------
Registry: UEFICA2023Status = Updated
SUCCESS: UPDATES ARE FINISHED. UEFI CA 2023 certs are present, PCA 2011 cert is revoked.My Computers
-
At a glance
Windows 11 Home, ver 25H2 build 26200.8246Intel Core i5 5200U @ 2.20GH4 GBIntel HD Graphics 5500 on board- OS
- Windows 11 Home, ver 25H2 build 26200.8246
- Computer type
- Laptop
- Manufacturer/Model
- Hewlett-Packard Spectre 13-4001 x360 convertable
- CPU
- Intel Core i5 5200U @ 2.20GH
- Motherboard
- Hewlett-Packard 802D
- Memory
- 4 GB
- Graphics Card(s)
- Intel HD Graphics 5500 on board
- Sound Card
- Intel Smart Sound Technology (Intel SST)
- Hard Drives
- Micron 256GB M.2 2280 NGFF SSD MTFDDAV256TBN, (SATA 6.0 Gb/s)
- Keyboard
- Model # G01KB
- Antivirus
- Microsoft Defender
- Other Info
- born on date: 25 Feb 2016
-
At a glance
Win 11 Home 25H2 build 26200.7922Intel Core i7 4th Gen 4790 (3.60GHz), Haswell...Samsung 16 GB DDR3 (8GB in 2 modules)NVIDIA GeForce GTX 760, 3GB, and on-board Int...- Operating System
- Win 11 Home 25H2 build 26200.7922
- Computer type
- PC/Desktop
- Manufacturer/Model
- Asus Desktop model M32AD-US019S (DOM: 6/9/2014 )
- CPU
- Intel Core i7 4th Gen 4790 (3.60GHz), Haswell 22nm Technology, SOCKET 1150
- Motherboard
- H81M-E/M51AD/DP_MB
- Memory
- Samsung 16 GB DDR3 (8GB in 2 modules)
- Graphics card(s)
- NVIDIA GeForce GTX 760, 3GB, and on-board Intel HD Graphics 4600 Rev 6
- Monitor(s) Displays
- HP EliteDisplay E241i LED; HP EliteDisplay E243
- Hard Drives
- Samsung 500GB SSD, 870 EVO (SATA 6.0 )
Micron 250GB SSD, CT250MX500
Toshiba HDD, 3GB (original drive w/PC)
- Case
- ASUS
- Keyboard
- ASUS-------------------------
- Antivirus
- MS Defender
- Other Info
- Additional Laptops:
HEWLETT PACKARD
HP OmniBook X Flip NGAI (Next Gen AI),
Model: 16-as0023dx
PT# B5UH1UA#ABA Product #: B5UH1UA
delivered and setup 7/25/25
16" 2K Touch-Screen Laptop
Intel Core Ultra 7 256V '24 Series 2 - CPU
Boost Clock Frequency 4.8 gigahertz; Neural Processing Unit (NPU) Yes;
16GB Memory, LPDDR5X
1TB SSD PCIe 4.0
Graphics: Intel Arc 140V
1 x HDMI 2.1
1 x Thunderbolt 4
2K Touch-Screen display, LED, IPS; 1920 x 1200 (Full HD+)
USB Ports: 1 x USB-C 3.1, 2 x USB-A 3.1
Wi-Fi 6E
weight 4.15 pounds
DELL
Model:I7591-7483BLK-PUS 2-in-1 (7000 Series)
purchased 12/3/2019,
15.6 inch 2-IN-1;
4K Ultra HD Touch-Screen, 3840 x 2160,
Intel Core i7 10510U CPU 1.80GHz,
16GB RAM DDR4 SDRAM 2400 megahert (2 slots),
dedicated graphics Nvidia GeForce MX250 2 GB Graphics,
PCIe 512GB Intel SSD + 32GB Optane Memory (Intel Optane Memory H10 with solid-state storage),
wireless-AX & Bluetooth
Battery: 68wh, Type 4VGMP 4 cell
After you revoke CA 2011, CA 2023 is the only version of the boot file that's allowed. This Macrium drive has the wrong version.
Windows has two sets of the boot files in parallel, under C:\Windows\Boot.
When you create a bootable drive, one of the two versions must be chosen.
The winning file gets copied to \EFI\Microsoft\Boot as bootmgfw.efi (no _EX in the filename). For a WinRE-based drive, normally most of the \Boot\EFI* folder gets copied over using the bcdboot command. For a WinPE-based drive you copy the same file as \EFI\Boot\bootx64.efi.
My observation about these backup products is (depending on what version you're using), auto-detection doesn't seem to be their strong point.
Windows has two sets of the boot files in parallel, under C:\Windows\Boot.
EFI\bootmgfw.efi -> CA 2021 version
EFI_EX\bootmgfw_EX.efi -> CA 2023 version
When you create a bootable drive, one of the two versions must be chosen.
The winning file gets copied to \EFI\Microsoft\Boot as bootmgfw.efi (no _EX in the filename). For a WinRE-based drive, normally most of the \Boot\EFI* folder gets copied over using the bcdboot command. For a WinPE-based drive you copy the same file as \EFI\Boot\bootx64.efi.
My observation about these backup products is (depending on what version you're using), auto-detection doesn't seem to be their strong point.
My Computer
At a glance
Windows 7
- OS
- Windows 7
- Local time
- 10:09 PM
- Posts
- 417
- OS
- Windows 11 Home, ver 25H2 build 26200.8246
Right, so how do I get the EFI_EX\bootmgfw_EX.efi -> CA 2023 version copied now to my Macrium Rescue disk? Sorry if it should be obvious to me but I'm pulling my hair out now!
My Computers
-
At a glance
Windows 11 Home, ver 25H2 build 26200.8246Intel Core i5 5200U @ 2.20GH4 GBIntel HD Graphics 5500 on board- OS
- Windows 11 Home, ver 25H2 build 26200.8246
- Computer type
- Laptop
- Manufacturer/Model
- Hewlett-Packard Spectre 13-4001 x360 convertable
- CPU
- Intel Core i5 5200U @ 2.20GH
- Motherboard
- Hewlett-Packard 802D
- Memory
- 4 GB
- Graphics Card(s)
- Intel HD Graphics 5500 on board
- Sound Card
- Intel Smart Sound Technology (Intel SST)
- Hard Drives
- Micron 256GB M.2 2280 NGFF SSD MTFDDAV256TBN, (SATA 6.0 Gb/s)
- Keyboard
- Model # G01KB
- Antivirus
- Microsoft Defender
- Other Info
- born on date: 25 Feb 2016
-
At a glance
Win 11 Home 25H2 build 26200.7922Intel Core i7 4th Gen 4790 (3.60GHz), Haswell...Samsung 16 GB DDR3 (8GB in 2 modules)NVIDIA GeForce GTX 760, 3GB, and on-board Int...- Operating System
- Win 11 Home 25H2 build 26200.7922
- Computer type
- PC/Desktop
- Manufacturer/Model
- Asus Desktop model M32AD-US019S (DOM: 6/9/2014 )
- CPU
- Intel Core i7 4th Gen 4790 (3.60GHz), Haswell 22nm Technology, SOCKET 1150
- Motherboard
- H81M-E/M51AD/DP_MB
- Memory
- Samsung 16 GB DDR3 (8GB in 2 modules)
- Graphics card(s)
- NVIDIA GeForce GTX 760, 3GB, and on-board Intel HD Graphics 4600 Rev 6
- Monitor(s) Displays
- HP EliteDisplay E241i LED; HP EliteDisplay E243
- Hard Drives
- Samsung 500GB SSD, 870 EVO (SATA 6.0 )
Micron 250GB SSD, CT250MX500
Toshiba HDD, 3GB (original drive w/PC)
- Case
- ASUS
- Keyboard
- ASUS-------------------------
- Antivirus
- MS Defender
- Other Info
- Additional Laptops:
HEWLETT PACKARD
HP OmniBook X Flip NGAI (Next Gen AI),
Model: 16-as0023dx
PT# B5UH1UA#ABA Product #: B5UH1UA
delivered and setup 7/25/25
16" 2K Touch-Screen Laptop
Intel Core Ultra 7 256V '24 Series 2 - CPU
Boost Clock Frequency 4.8 gigahertz; Neural Processing Unit (NPU) Yes;
16GB Memory, LPDDR5X
1TB SSD PCIe 4.0
Graphics: Intel Arc 140V
1 x HDMI 2.1
1 x Thunderbolt 4
2K Touch-Screen display, LED, IPS; 1920 x 1200 (Full HD+)
USB Ports: 1 x USB-C 3.1, 2 x USB-A 3.1
Wi-Fi 6E
weight 4.15 pounds
DELL
Model:I7591-7483BLK-PUS 2-in-1 (7000 Series)
purchased 12/3/2019,
15.6 inch 2-IN-1;
4K Ultra HD Touch-Screen, 3840 x 2160,
Intel Core i7 10510U CPU 1.80GHz,
16GB RAM DDR4 SDRAM 2400 megahert (2 slots),
dedicated graphics Nvidia GeForce MX250 2 GB Graphics,
PCIe 512GB Intel SSD + 32GB Optane Memory (Intel Optane Memory H10 with solid-state storage),
wireless-AX & Bluetooth
Battery: 68wh, Type 4VGMP 4 cell
- Local time
- 10:09 PM
- Posts
- 1,044
- OS
- Windows 11 Pro 25H2 26200.8037
Just Remade my Macrium Reflect X Boot Media in Windows PE Mode, and seems like it worked, i haven't tested if it actually boots as yet, but Check_UEFI-CA2023.ps1 -Bootmedia shows its now allowed
Will test to see if actually boots in a bit here
Code:
PS C:\Temp> .\CHeck_UEFI-CA2023.ps1 -Bootmedia
Secure Boot: ON
Virtualization Based Security: ON
BitLocker on (C:) OFF
UEFI KEK Certs
--------------
Microsoft Corporation KEK CA 2011
Microsoft Corporation KEK 2K CA 2023
UEFI DB Certs
-------------
Microsoft Corporation UEFI CA 2011
Microsoft Windows Production PCA 2011
Microsoft Option ROM UEFI CA 2023
Microsoft UEFI CA 2023
Windows UEFI CA 2023
UEFI DBX Certs
--------------
Microsoft Windows Production PCA 2011
Windows BootMgr SVN 8.0
EFI Files
---------
Windows Boot Manager [Windows UEFI CA 2023] is ALLOWED.
Registry: WindowsUEFICA2023Capable = 2
[Windows UEFI CA 2023] in UEFI DB, and Windows starting from CA 2023 Boot Manager.
SkuSiPolicy.p7b is CURRENT.
Bootable Media
--------------
USB Drive E:
Boot File [Windows UEFI CA 2023] is ALLOWED.
STATUS REPORT
-------------
Registry: UEFICA2023Status = Updated
SUCCESS: UPDATES ARE FINISHED. UEFI CA 2023 certs are present, PCA 2011 cert is revoked.Will test to see if actually boots in a bit here
My Computers
-
At a glance
Windows 11 Pro 25H2 26200.8037AMD Ryzen 7700X32GB DDR 5 RGB 5600MhzRadeon 7800XT- OS
- Windows 11 Pro 25H2 26200.8037
- Computer type
- PC/Desktop
- Manufacturer/Model
- PreBuilt
- CPU
- AMD Ryzen 7700X
- Motherboard
- MSI B650 VC WIfi Rev 1.0
- Memory
- 32GB DDR 5 RGB 5600Mhz
- Graphics Card(s)
- Radeon 7800XT
- Sound Card
- Onboard Audio
- Monitor(s) Displays
- Asus VG245H
- Screen Resolution
- 1920x1080
- Hard Drives
- Samsung 990 Evo Plus NVMe Boot
Samsung 990 Pro 1TB Game NVMe
External
Western Digital Elements 500GB
Western Digital My Passport 2TB Blue
Western Digital My Passport 2TB Red
Toshiba 2TB in External Enclosure
Seagate 8TB in External Enclosure
Seagate 1TB Portable USB 3 External Drive
Western Digital My Book 8TB (Primary Backup drive)
Western Digital Black 4TB In External Enclosure
- PSU
- 750 Watt High Power
- Case
- Lian Li Lan Cool 216 ARGB Airflow
- Cooling
- 2 160MM Front, 1 140MM Rear Exhaust
- Keyboard
- Logitech G513
- Mouse
- Logitech G502 X
- Internet Speed
- Gigabit 1100Mb/35 Upload
- Browser
- MS Edge Chromium and Bing Search
- Antivirus
- Windows Defender, Malwarebytes Premium
- Other Info
- UEFI, Secure Boot, TPM 2.0, Macrium Reflect X
-
At a glance
Windows 11 Pro 25H2 26200.8037Ryzen 7 7735HS16GB DDR 5AMD Radeon™ 680M & Radeon 7700S- Operating System
- Windows 11 Pro 25H2 26200.8037
- Computer type
- Laptop
- Manufacturer/Model
- Asus TUF A16 Advantage Edition FA617NT.A16.R7700
- CPU
- Ryzen 7 7735HS
- Motherboard
- OEM Asus Motherboard
- Memory
- 16GB DDR 5
- Graphics card(s)
- AMD Radeon™ 680M & Radeon 7700S
- Sound Card
- Onboard
- Monitor(s) Displays
- 16inch FHD 165hz
- Screen Resolution
- 1920x1080
- Hard Drives
- 512GB NVMe Boot Drive
- PSU
- Laptop PSU
- Case
- Laptop Case
- Cooling
- OEM Cooling
- Keyboard
- OEM Laptop Keyboard
- Mouse
- Touchpad & G502 Hero
- Internet Speed
- Gigabit 1100 Download/35 Upload
- Browser
- MS Edge with Bing search
- Antivirus
- Windows Defender & Malwarebytes Premium
- Other Info
- Macrium Reflect X
Right, so how do I get the EFI_EX\bootmgfw_EX.efi -> CA 2023 version copied now to my Macrium Rescue disk? Sorry if it should be obvious to me but I'm pulling my hair out now!
Download the latest ZIP file from post #1 (not the GitHub link). And run:
Code:
Update_UEFI-CA2023.ps1 -BootMediaMy Computer
At a glance
Windows 7
- OS
- Windows 7
- Local time
- 10:09 PM
- Posts
- 417
- OS
- Windows 11 Home, ver 25H2 build 26200.8246
Sorry to be a pest but the Macrium Boot drive does show Boot File [Windows UEFI CA 2023] is ALLOWED. D:\EFI\Microsoft\Boot\bootmgfw.efi; File version: 26100.30227, SVN 7.0
So I need to get this to SVN 8.0 to match the system boot drive. Sorry about driving you crazy with all of this. I need to go to bed now!
So I need to get this to SVN 8.0 to match the system boot drive. Sorry about driving you crazy with all of this. I need to go to bed now!
My Computers
-
At a glance
Windows 11 Home, ver 25H2 build 26200.8246Intel Core i5 5200U @ 2.20GH4 GBIntel HD Graphics 5500 on board- OS
- Windows 11 Home, ver 25H2 build 26200.8246
- Computer type
- Laptop
- Manufacturer/Model
- Hewlett-Packard Spectre 13-4001 x360 convertable
- CPU
- Intel Core i5 5200U @ 2.20GH
- Motherboard
- Hewlett-Packard 802D
- Memory
- 4 GB
- Graphics Card(s)
- Intel HD Graphics 5500 on board
- Sound Card
- Intel Smart Sound Technology (Intel SST)
- Hard Drives
- Micron 256GB M.2 2280 NGFF SSD MTFDDAV256TBN, (SATA 6.0 Gb/s)
- Keyboard
- Model # G01KB
- Antivirus
- Microsoft Defender
- Other Info
- born on date: 25 Feb 2016
-
At a glance
Win 11 Home 25H2 build 26200.7922Intel Core i7 4th Gen 4790 (3.60GHz), Haswell...Samsung 16 GB DDR3 (8GB in 2 modules)NVIDIA GeForce GTX 760, 3GB, and on-board Int...- Operating System
- Win 11 Home 25H2 build 26200.7922
- Computer type
- PC/Desktop
- Manufacturer/Model
- Asus Desktop model M32AD-US019S (DOM: 6/9/2014 )
- CPU
- Intel Core i7 4th Gen 4790 (3.60GHz), Haswell 22nm Technology, SOCKET 1150
- Motherboard
- H81M-E/M51AD/DP_MB
- Memory
- Samsung 16 GB DDR3 (8GB in 2 modules)
- Graphics card(s)
- NVIDIA GeForce GTX 760, 3GB, and on-board Intel HD Graphics 4600 Rev 6
- Monitor(s) Displays
- HP EliteDisplay E241i LED; HP EliteDisplay E243
- Hard Drives
- Samsung 500GB SSD, 870 EVO (SATA 6.0 )
Micron 250GB SSD, CT250MX500
Toshiba HDD, 3GB (original drive w/PC)
- Case
- ASUS
- Keyboard
- ASUS-------------------------
- Antivirus
- MS Defender
- Other Info
- Additional Laptops:
HEWLETT PACKARD
HP OmniBook X Flip NGAI (Next Gen AI),
Model: 16-as0023dx
PT# B5UH1UA#ABA Product #: B5UH1UA
delivered and setup 7/25/25
16" 2K Touch-Screen Laptop
Intel Core Ultra 7 256V '24 Series 2 - CPU
Boost Clock Frequency 4.8 gigahertz; Neural Processing Unit (NPU) Yes;
16GB Memory, LPDDR5X
1TB SSD PCIe 4.0
Graphics: Intel Arc 140V
1 x HDMI 2.1
1 x Thunderbolt 4
2K Touch-Screen display, LED, IPS; 1920 x 1200 (Full HD+)
USB Ports: 1 x USB-C 3.1, 2 x USB-A 3.1
Wi-Fi 6E
weight 4.15 pounds
DELL
Model:I7591-7483BLK-PUS 2-in-1 (7000 Series)
purchased 12/3/2019,
15.6 inch 2-IN-1;
4K Ultra HD Touch-Screen, 3840 x 2160,
Intel Core i7 10510U CPU 1.80GHz,
16GB RAM DDR4 SDRAM 2400 megahert (2 slots),
dedicated graphics Nvidia GeForce MX250 2 GB Graphics,
PCIe 512GB Intel SSD + 32GB Optane Memory (Intel Optane Memory H10 with solid-state storage),
wireless-AX & Bluetooth
Battery: 68wh, Type 4VGMP 4 cell
- Local time
- 4:09 AM
- Posts
- 169
- OS
- Windows 11 Pro (Currently 25H2)
How do I update on unsupported hardware
Thx
Thx
My Computer
At a glance
Windows 11 Pro (Currently 25H2)Intel Core i7 5820k32GB RAMNvidia RTX 5090
- OS
- Windows 11 Pro (Currently 25H2)
- Computer type
- PC/Desktop
- CPU
- Intel Core i7 5820k
- Motherboard
- Asus X99A
- Memory
- 32GB RAM
- Graphics Card(s)
- Nvidia RTX 5090
- Sound Card
- Intergraded
- Monitor(s) Displays
- Samsung OdysseyG7
- Screen Resolution
- 4K HDR
- Hard Drives
- 2x Samsung M2 990Pro 4TB
- PSU
- Corsair RM1000X
- Case
- Fractal Design
- Cooling
- In & Outtake Noctua 3000 RPMs
- Keyboard
- Razer Black widow
- Mouse
- Razer Naga Trinity
- Internet Speed
- 1000Mbit
- Browser
- Edge
- Antivirus
- Custom
Asus X99A is a really old PC. Before you do anything, please check your BIOS menu.
Do you have an UEFI option for Custom mode, and Delete All Keys?
My Computer
At a glance
Windows 7
- OS
- Windows 7
Latest Support Threads
-
Understanding bitlocker conversion status
- Started by hershey4
- Replies: 3
-
-
-
Solved You can install classic Windows Movie Maker on Windows 11. Here’s how- Started by Borg 386
- Replies: 6
-
Latest Tutorials
-
-
Phone Remove Windows 11 Device from Link to Windows app on Android Phone- Started by Brink
- Replies: 0
-
Personalization Add or Remove Switch User on User Tile in Start Menu in Windows 11- Started by Brink
- Replies: 0
-
System Enable or Disable Notifications for Reminders and VoIP calls on Lock Screen in Windows 11- Started by Brink
- Replies: 0
-
Browsers and Mail Enable or Disable Sign-in to Microsoft Edge using non-Microsoft accounts in Windows 11- Started by Brink
- Replies: 1