Solved garlin's PowerShell scripts for updating Secure Boot CA 2023

Klaver7 · 2026-08-08T15:40:12-0400

BTW. over the years I seen many event ID 87 and event id 360, last machine I build still has the 360 - Windows Hello for Business provisioning will not be launched. And thats with a RETAIL key. Nothing to worry about as it never gave me problems.

TheVisitor · 2026-08-08T15:46:54-0400

Here you go:

Klaver7 · 2026-08-08T15:55:01-0400

OK your fine on that as mine is greyed out also but on your right I see event ID 17 that could be:
WHEA-Logger Event ID 17 is a system warning indicating a corrected hardware error on a PCI Express (PCIe) root port, meaning your hardware experienced a minor glitch that Windows successfully fixed on its own ....

TheVisitor · 2026-08-08T16:01:43-0400

Klaver7 said:
OK your fine on that as mine is greyed out also but on your left I see event ID 17 that could be:
WHEA-Logger Event ID 17 is a system warning indicating a corrected hardware error on a PCI Express (PCIe) root port, meaning your hardware experienced a minor glitch that Windows successfully fixed on its own ....

Yeah, the WHEA logs have been coming for awhile, intermittently. I've been ignoring them as things seems to be running OK.
The event ID Primary Device Name

CI\VEN_10EC&DEV_C822&SUBSYS_85F7103C&REV_00 points to Blue-tooth, I don't use it.

KevTech · 2026-08-08T16:08:42-0400

Klaver7 said:
Windows Key + R, type compmgmt.msc (press Ctrl + Shift + Enter to run with full admin rights)

You also just right-click the start button and select event viewer

Klaver7 · 2026-08-08T16:13:36-0400

The one I keep an eye on is event ID 1001 that can popup at times, in fact I see one right now from this afternoon "
Fault bucket , type 0
Event Name: crashpad_log
Response: Not available
Cab Id: 0 - Blah etc / Part of "MicrosoftEdgeUpdate.exe" / I uninstalled Edge as it's legal here but the thing likes to throw an error at times.
Most of the time they go away but I had where I had to delete some files under "C:\ProgramData\Microsoft\Windows\WER" to fix MS stupidity.
About WIFI Ha had a couple a Motherboards that had that onboard, 1st ding I do is drop the VRM and remove them things as it's a NO GO 4 me.
Too many head aches and lets be hones LAN = full speed

That was before you could toggle them off in the BIOS. Now you can.
Oh and before I forget, about a month and a half ago I installed a system with Windows education and folowed a tip from someone to edit
"IntegratedServicesRegionPolicySet.json" ....to remove Edge! DO NOT DO IT as it cause the system to go bezerk everytime I opened Settings it sounded like a jetplane taking off and where I had a power-meter hooked up the wattage went throught the roof !!

KevTech · 2026-08-08T17:21:41-0400

Klaver7 said:
I uninstalled Edge as it's legal here but the thing likes to throw an error at times.

Did you also remove the tasks from task scheduler?

By default there are at least two update tasks for Edge when you click on Task Scheduler Library.

I also set the services for Edge update to manual.

garlin · 2026-08-08T19:45:17-0400

QUICK POLL (reply with YES OR NO):

Would you prefer the report to hide the words "is ALLOWED" when running in normal mode?
Meaning you would only see a notification when the file is "BANNED". In Verbose mode, it would say "is ALLOWED".

I think this way is easier to see the problems.

For example:

Code:

USB Drive D: "ESD-ISO"
    Boot File [Microsoft Corporation UEFI CA 2011]

    boot.wim:2 (WinPE 26100.8873)
        Boot Manager [Windows UEFI CA 2023]
        winload.efi (26100.8870)

    boot.stl is CURRENT.

    install.esd:1 (W11 25H2 26200.8873)
        Boot Manager [Windows UEFI CA 2023]
        winload.efi (26100.8870)


DVD Drive E: "CCCOMA_X64FRE_EN-US_DV9"
    Boot File [Production PCA 2011] is BANNED.

    boot.wim:2 (WinPE 19041.2965)
        Boot Manager [Production PCA 2011] is BANNED.
        winload.efi (19041.2965)

    install.wim:1 (Windows 22H2 19045.2965)
        Boot Manager [Production PCA 2011] is BANNED.
        winload.efi (19041.2965)


DVD Drive F: "ESD-ISO"
    Boot File [Production PCA 2011] is BANNED.

    boot.wim:2 (WinPE 26100.8873)
        Boot Manager [Windows UEFI CA 2023]
        winload.efi (26100.8870)

    install.esd:1 (W11 25H2 26200.8873)
        Boot Manager [Windows UEFI CA 2023]
        winload.efi (26100.8870)

TheVisitor · 2026-08-08T19:49:42-0400

In reply to garlin: yes

wabbit · 2026-08-08T20:01:46-0400

I vote yes.

gunrunnerjohn · 2026-08-08T20:09:32-0400

TheVisitor said:
Thanks, that is where I was looking but guess I'm lucky I'm not seeing '87' , strange thing is being able to 'filter custom view / task' is grayed out.

Just use Filter Current Log while viewing the Windows/System log. There's no need to create a custom view.

Scott · 2026-08-08T20:48:23-0400

garlin said:
QUICK POLL (reply with YES OR NO):

No.

garlin · 2026-08-08T20:50:36-0400

Scott said:
No for normal mode.

You want the change? Or leaving it like it was before?

Klaver7 · 2026-08-08T20:57:14-0400

"hide the words "is ALLOWED" Yes I think if we can see it with -verbozo

Kinda of a tricky question the way you phrazed it

anchamp65 · 2026-08-08T21:03:09-0400

QUICK POLL (reply with YES OR NO):
No, leave it there, it avoids any questionning is it good or not
It's written couldn't be clearer

Klaver7 · 2026-08-08T21:04:07-0400

KevTech said:
Did you also remove the tasks from task scheduler?

By default there are at least two update tasks for Edge when you click on Task Scheduler Library.

View attachment 179028

I also set the services for Edge update to manual.

View attachment 179029

It's also responsible for Webview2, The big Boy's told me to leave it alone some time ago, I dont have Edge on any of my systems, but do have Webview2 under 25H2. 24H2 IOT LTSC dont have either But still has the "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" running with 2 dif. sessions and commands. I stopped it some time back and it started to build up weird .tmp files that kept getting bigger so I put it back like it was.

Scott · 2026-08-08T21:05:18-0400

garlin said:
Would you prefer the report to hide the words "is ALLOWED" when running in normal mode?

Yes.

Klaver7 · 2026-08-08T21:06:00-0400

anchamp65 said:
QUICK POLL (reply with YES OR NO):
No, leave it there, it avoids any questionning is it good or not
It's written couldn't be clearer

I am getting confused am I am not even drinking LMAO, I still think the right answer 4 me is YES

anchamp65 · 2026-08-08T21:07:47-0400

Klaver7 said:
It's also responsible for Webview2, The big Boy's told me to leave it alone some time ago, I dont have Edge on any of my systems, but do have Webview2 under 25H2. 24H2 IOT LTSC dont have either But still has the "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" running with 2 dif. sessions and commands. I stopped it some time back and it started to build up weird .tmp files that kept getting bigger so I put it back like it was.

Guys, can we keep this thread about secure boot related and not about how you customize and use Windows
You can have a private chat about it if you want to continue

Thanks in advance guys

anchamp65 · 2026-08-08T21:09:04-0400

Klaver7 said:
I am getting confused am I am not even drinking LMAO, I still think the right answer 4 me is YES

You already answered, good for you
It's a poll for everyone not just those that answer quicker

Solved garlin's PowerShell scripts for updating Secure Boot CA 2023

Active member

My Computer My Computer

At a glance

Well-known member

Attachments

My Computer My Computer

At a glance

Active member

My Computer My Computer

At a glance

Well-known member

My Computer My Computer

At a glance

Well-known member

My Computer My Computer

At a glance

Active member

My Computer My Computer

At a glance

Well-known member

My Computer My Computer

At a glance

Well-known member

My Computer My Computer

At a glance

Well-known member

My Computer My Computer

At a glance

Well-known member

My Computers My Computers

At a glance

At a glance

Well-known member

My Computers My Computers

At a glance

At a glance

Well-known member

My Computers My Computers

At a glance

At a glance

Well-known member

My Computer My Computer

At a glance

Active member

My Computer My Computer

At a glance

Active member

My Computer My Computer

At a glance

Active member

My Computer My Computer

At a glance

Well-known member

My Computers My Computers

At a glance

At a glance

Active member

My Computer My Computer

At a glance

Active member

My Computer My Computer

At a glance

Active member

My Computer My Computer

At a glance

Similar threads

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computers

My Computers

My Computers

My Computer

My Computer

My Computer

My Computer

My Computers

My Computer

My Computer

My Computer