Solved garlin's PowerShell scripts for updating Secure Boot CA 2023


phil, the option is urs . do u use secure boot. if you dont use it you have nothing to worry about you pc is not going to die if you dont have the new certs. if you do mess something up. you can just pull your cmos battery and leave it out for a min or so . that will reset it back to default bios. another option if your worried is to make a iso file using rufus and select the ca 2023 cert to automatically burn the image with that file. i used garlin's latest script to update my 14 year old hp to be as they say ready when the time comes. the only thing i had issues with was the powershell commands .But i can say garlins scripts do work.
 

My Computer

System One

  • OS
    WINDOWS 11 WINDOWS 10
    Computer type
    PC/Desktop
    Manufacturer/Model
    HP H8 1360T
    CPU
    Intel(R) Core(TM) i7 -3770K CPU 3.50 GZ 3501 4 CORE
    Motherboard
    PEGATRON 2AD5
    Memory
    32.0 GB (31.9 GB usable)
    Graphics Card(s)
    AMD RADEON TM R5240 INTELL HD GRAPHICS 4600 TIGER 1+1 USB
    Sound Card
    AMD HD . IDT
    Monitor(s) Displays
    AOC WAL MART SPECIAL . HP 2311 IX IPS LED DELL 1708 FP
    Screen Resolution
    1920 X 1080 1600X900 1280X940
    Hard Drives
    1 FAXING S 100 512GB 1 KINGSTON 120 GB SSD 1 X12 SSD 512 GB
    PSU
    300 WATT HP
    Case
    FULL
    Cooling
    ON BOARD FAN
    Keyboard
    LOGITEC K 520 WIRELESS
    Mouse
    LOGITEC M 510 WIRELESS
    Internet Speed
    55 UP 11.2 DOWN
    Browser
    CHROME EDGE
    Antivirus
    WINDOWS SECUIRTY
    Other Info
    NON SUPPORTED HARDWARE FOR WINDOWS 11
Thanks for the info. And yes, my PC is in the list, but the updates are spread throughout June and even July for some weird reason.
Better late than never. If you ever have to reset your BIOS for any reason, it saves you from having to do the manual steps.
 

My Computer

System One

  • OS
    Windows 7
@garlin ,

My 2019 Dell XPS 8930 SE (last BIOS version 1.31) did not update the Secure Boot with the new certificates after the June Windows Update to 26200.8655) - Computer Specs 1. My 2020 Dell XPS XPS 15 7590 - Computer Spec 2, also not on the supported list for Dell BIOS updates, miraculously, and without notice, did update itself to the new certificates about six weeks ago, according to the Windows Device Security, Secure Boot screen.

It appears that I will have to manually update my 8930 Secure Boot keys. Is this post still the latest and applicable to that computer: How to check if your Secure Boot certs are updated. (three methods)?
Short answer:

1. Download the scripts from the first post.

2. Run the check script:
Code:
Check-UEFI.bat  Verbose

3. Post the report output, and we'll help you figure where your XPS 8930 stands right now. The update scripts are designed to handle 3 different scenarios, ranging from ideal to the hardest. But if Dell has pushed either a BIOS update, or submitted a KEK file to MS (easier for them), then your PC may be in a better state.
 

My Computer

System One

  • OS
    Windows 7
Back
Top Bottom