- Local time
- 5:59 PM
- Posts
- 134
- OS
- Windows 11 Pro 25H2
My Computer
At a glance
Windows 11 Pro 25H2Gen 11 Core i516GB
- OS
- Windows 11 Pro 25H2
- Computer type
- Laptop
- Manufacturer/Model
- HP
- CPU
- Gen 11 Core i5
- Memory
- 16GB
Solved garlin's PowerShell scripts for updating Secure Boot CA 2023
- Thread starter garlin
- Start date
These days, there shouldn't be too many surprises except for late stragglers.
I imagine the real wave of panic will happen not on October 13, 2026 (which is a Patch Tuesday), but November 10, 2026. That is the first Patch Tuesday where MS can drop a boot manager which can only be signed by CA 2023, since PCA 2011 has already expired. October is the last chance under the old cert to have two signed versions.
After that you're stuck with presumably disabling Secure Boot mode. Those desperate users are probably the leftovers with the unsupported BIOS'es which are more likely to get bricked because of an unseen HW limitation.
I imagine the real wave of panic will happen not on October 13, 2026 (which is a Patch Tuesday), but November 10, 2026. That is the first Patch Tuesday where MS can drop a boot manager which can only be signed by CA 2023, since PCA 2011 has already expired. October is the last chance under the old cert to have two signed versions.
After that you're stuck with presumably disabling Secure Boot mode. Those desperate users are probably the leftovers with the unsupported BIOS'es which are more likely to get bricked because of an unseen HW limitation.
My Computer
At a glance
Windows 7
- OS
- Windows 7
That's the script I use, always with the most recent ISO with updated boot files from UUPdump.
Updating Windows bootable media to use the PCA2023 signed boot manager | Microsoft Support
Updating Windows bootable media to use the PCA2023 signed boot manager
support.microsoft.com
My Computers
-
At a glance
Win 11 Pro 25H2 26200.9168Intel® Core™ i7-14700KG.SKILL Ripjaws S5 Series 64GB (2 x 32GB) DDR5ASUS GeForce RTX 4070 Super 12GB- OS
- Win 11 Pro 25H2 26200.9168
- Computer type
- PC/Desktop
- Manufacturer/Model
- Self Built
- CPU
- Intel® Core™ i7-14700K
- Motherboard
- ASUS TUF Z690-PLUS WIFI (BIOS 4505)
- Memory
- G.SKILL Ripjaws S5 Series 64GB (2 x 32GB) DDR5
- Graphics Card(s)
- ASUS GeForce RTX 4070 Super 12GB
- Sound Card
- Sound Blaster AE-5 Plus
- Monitor(s) Displays
- ASUS TUF Gaming 27" 2K HDR Gaming
- Screen Resolution
- 2560 x 1440
- Hard Drives
- Samsung 990 Pro 1TB NVMe (Win 11 25H2)
SK hynix P41 500GB NVMe
SK hynix P41 2TB NVMe (x3)
Crucial P3 Plus 4TB
- PSU
- Corsair RM850x Shift
- Case
- Antec Dark Phantom DP502 FLUX
- Cooling
- Corsair Nautilus 360 RS AIO
- Keyboard
- Logitech MK 320
- Mouse
- Razer Basilisk V3
- Internet Speed
- 750Mbs
- Browser
- Firefox
- Antivirus
- Winows Security
- Other Info
- MR 8.1 Home
-
At a glance
Win 11 Pro 25H2 26200.9168Intel Core i5-1140064 GB DDR4MSI GeForce RTX 3060 Ventus 2X 12GB- Operating System
- Win 11 Pro 25H2 26200.9168
- Computer type
- PC/Desktop
- Manufacturer/Model
- Self Built
- CPU
- Intel Core i5-11400
- Motherboard
- Asus TUF Gaming Z590 Plus WiFi (BIOS 2803)
- Memory
- 64 GB DDR4
- Graphics card(s)
- MSI GeForce RTX 3060 Ventus 2X 12GB
- Sound Card
- SoundBlaster Audigy Fx V2
- Monitor(s) Displays
- Samsung F27T350
- Screen Resolution
- 1920x1080
- Hard Drives
- Samsung 980 Pro 1TB
Samsung 970 EVO Plus 2TB
Samsung 870 EVO 500GB SSD
- PSU
- Corsair HX750
- Case
- Cougar MX330-G Window
- Cooling
- Thermalright Frozen Edge 240 Black AIO
- Internet Speed
- 350Mbps
- Browser
- Firefox
- Antivirus
- Windows Security
-
System Three
Win 11 Pro 25H2 26200.9168
ASUS PRIME Z370-P II BIOS 3004 7/12/21
Intel Core i7-8700 CPU @ 3.20GHz
32GB DDR4 RAM (4x8)
iGPU Intel UHD Graphics 630
Cooler Master Hyper 212
Mid-Tower Desktop
Microsoft late to the party as usual... Why not build the utility into the operating system before June? The average user has never heard of Powershell.
Last edited:
My Computers
-
At a glance
Windows 11 & Zorin ProIntel® Core™ Ultra 9 Processor 275HX 2.7 GHz32 gbNVIDIA® GeForce RTX™ 5060 Laptop GPU- OS
- Windows 11 & Zorin Pro
- Computer type
- Laptop
- Manufacturer/Model
- Asus Rog Strix G16
- CPU
- Intel® Core™ Ultra 9 Processor 275HX 2.7 GHz
- Motherboard
- AsusteK Computer
- Memory
- 32 gb
- Graphics Card(s)
- NVIDIA® GeForce RTX™ 5060 Laptop GPU
- Sound Card
- Realtek High Definition Audio
- Monitor(s) Displays
- Laptop 16 inch
- Screen Resolution
- 2560 X 1600
- Hard Drives
- Boot: Samsung 9100 NVME 2 TB Microsoft Storage Controller: Standard NVM Express Driver: Microsoft 6/21/2006. No SATA/AHCI on my motherboard or in bios
- Mouse
- Pad
- Browser
- Google Chrome
- Antivirus
- Microsoft
- Other Info
- Printer: HP Color LaserJet MFP M477dw
-
At a glance
Windows 11 Pro, Zorin ProIntel Nuc 8i7, Intel Nuc 8i5Intel internal- Operating System
- Windows 11 Pro, Zorin Pro
- Computer type
- PC/Desktop
- Manufacturer/Model
- Intel
- CPU
- Intel Nuc 8i7, Intel Nuc 8i5
- Motherboard
- Intel
- Graphics card(s)
- Intel internal
- Monitor(s) Displays
- Dell U27
- Hard Drives
- Samsung 990 Pro
- Keyboard
- Dell USB
- Mouse
- Dell USB
- Antivirus
- Windows Defender
-
Dell 8500 Windows 10 Pro extended, Dell 8700 Windows 10 Pro extended , Hp Pavilion Linux
Skip the MS script and edit your ConvertConfig.ini, before running uup_download_windows.cmd.
It's been there for a while, but nobody tells you that.
Code:
UpdtBootFiles=1My Computer
At a glance
Windows 7
- OS
- Windows 7
The script is provided for IT pro's, who do their own updating of ISO's
Everyone else is supposed to use MCT to create ISO's or USB drives. MCT still doesn't have a positive method of confirming it's going to copy the newer boot files. Compare that to Rufus, which has a prominent check box in the options.
My Computer
At a glance
Windows 7
- OS
- Windows 7
Yes, that's exactly what I do. But why skip the script?
My Computers
-
At a glance
Win 11 Pro 25H2 26200.9168Intel® Core™ i7-14700KG.SKILL Ripjaws S5 Series 64GB (2 x 32GB) DDR5ASUS GeForce RTX 4070 Super 12GB- OS
- Win 11 Pro 25H2 26200.9168
- Computer type
- PC/Desktop
- Manufacturer/Model
- Self Built
- CPU
- Intel® Core™ i7-14700K
- Motherboard
- ASUS TUF Z690-PLUS WIFI (BIOS 4505)
- Memory
- G.SKILL Ripjaws S5 Series 64GB (2 x 32GB) DDR5
- Graphics Card(s)
- ASUS GeForce RTX 4070 Super 12GB
- Sound Card
- Sound Blaster AE-5 Plus
- Monitor(s) Displays
- ASUS TUF Gaming 27" 2K HDR Gaming
- Screen Resolution
- 2560 x 1440
- Hard Drives
- Samsung 990 Pro 1TB NVMe (Win 11 25H2)
SK hynix P41 500GB NVMe
SK hynix P41 2TB NVMe (x3)
Crucial P3 Plus 4TB
- PSU
- Corsair RM850x Shift
- Case
- Antec Dark Phantom DP502 FLUX
- Cooling
- Corsair Nautilus 360 RS AIO
- Keyboard
- Logitech MK 320
- Mouse
- Razer Basilisk V3
- Internet Speed
- 750Mbs
- Browser
- Firefox
- Antivirus
- Winows Security
- Other Info
- MR 8.1 Home
-
At a glance
Win 11 Pro 25H2 26200.9168Intel Core i5-1140064 GB DDR4MSI GeForce RTX 3060 Ventus 2X 12GB- Operating System
- Win 11 Pro 25H2 26200.9168
- Computer type
- PC/Desktop
- Manufacturer/Model
- Self Built
- CPU
- Intel Core i5-11400
- Motherboard
- Asus TUF Gaming Z590 Plus WiFi (BIOS 2803)
- Memory
- 64 GB DDR4
- Graphics card(s)
- MSI GeForce RTX 3060 Ventus 2X 12GB
- Sound Card
- SoundBlaster Audigy Fx V2
- Monitor(s) Displays
- Samsung F27T350
- Screen Resolution
- 1920x1080
- Hard Drives
- Samsung 980 Pro 1TB
Samsung 970 EVO Plus 2TB
Samsung 870 EVO 500GB SSD
- PSU
- Corsair HX750
- Case
- Cougar MX330-G Window
- Cooling
- Thermalright Frozen Edge 240 Black AIO
- Internet Speed
- 350Mbps
- Browser
- Firefox
- Antivirus
- Windows Security
-
System Three
Win 11 Pro 25H2 26200.9168
ASUS PRIME Z370-P II BIOS 3004 7/12/21
Intel Core i7-8700 CPU @ 3.20GHz
32GB DDR4 RAM (4x8)
iGPU Intel UHD Graphics 630
Cooler Master Hyper 212
Mid-Tower Desktop
All the MS script does is add the same CA 2023 files to the ISO's boot folders. The rest is overhead fluff with mounting/unmounting boot.wim, and allowing you to create an USB using oscdimg.exe.
If you didn't know about the UpdtBootFiles option, you would need another tool to do the same task.
Anything like Make2023BootableMedia.ps1, Rufus with the CA 2023 option, or "Update_UEFI-CA2023.ps1 -BootMedia". You could do the same with bcdboot yourself, except you have to clean up since bcdboot wants to modify the local BCD file (to insert a newly added boot entry).
If you didn't know about the UpdtBootFiles option, you would need another tool to do the same task.
Anything like Make2023BootableMedia.ps1, Rufus with the CA 2023 option, or "Update_UEFI-CA2023.ps1 -BootMedia". You could do the same with bcdboot yourself, except you have to clean up since bcdboot wants to modify the local BCD file (to insert a newly added boot entry).
My Computer
At a glance
Windows 7
- OS
- Windows 7
Latest Support Threads
-
-
-
-
Local Accounts vs MSA Installation?
- Started by win11freak
- Replies: 8
-
How do I fix . . . double click on photo but it doesnt open- Started by M1000tutorials
- Replies: 11
Latest Tutorials
-
Windows Update Reset Windows Insider Program Settings to Default in Windows 11- Started by Brink
- Replies: 0
-
System Change Schedule Settings to Automatically Optimize Drives in Windows 11- Started by Brink
- Replies: 0
-
Privacy and Security Remove All Automatically Added Search Index Locations in Windows 11- Started by Brink
- Replies: 2
-
Personalization Add or Remove App Extensions on Context Menu in Windows 11- Started by Brink
- Replies: 1
-
Accessibility Enable or Disable Open Apps Maximized by Default in Windows 11- Started by Brink
- Replies: 0