Hasleo Backup Suite

Autobahn said:

I want to add a Hasleo boot menu but I'm not sure about the drivers to be injected into WinPE.
Automatic driver injection is ticked.
What about 'Enable support for UEFI CA 2023? To enable this, I would have to tick 'Download WinPE components'.
The Secure Boot on my laptop currently has all required certificates.

Click to expand...

Hasleo has been asking this of me also when creating a Rescue USB. I just allow it. I believe it's why I can restore images created pre Cert changes, without modifying that old backup.

When you do a restore from within Windows for the first time, it has to adjust the environment at boot. It asks again if you want to add 2023 support. Again, I allow it.

I'm pretty sure @Froggie could better assist.

That tutorial I made is a bare bones, shouldn't be able to screw it up, tutorial. I actually made it for my sister so I wouldn't have to visit her lol

antspants said:

When you do a restore from within Windows for the first time, it has to adjust the environment at boot. It asks again if you want to add 2023 support. Again, I allow it.

I'm pretty sure @Froggie could better assist.

Click to expand...

I'll wait for a few more replies before going ahead, just to be sure.

My understanding is that if you have updated with the 2023 certs, you should allow it.
But yes, others are more experienced.

Last time I played with the free Hasleo, their Secure Boot support looked good for knowing where to find the CA 2023 files.

But I think they'll get tripped up by the SVN number, once everyone's done the CA 2011 revocation. In the post-revocation world, the Monthly Update can randomly bump the SVN (lowest version of the Windows boot manager which is allowed). When that happens, you need to recreate the USB drive.

Technically you could just copy a bunch of files over, but it's easier for non-technical users to just recreate the drive.

Think of the SVN as a set of clock hands. The clock can only move forward. It doesn't always move every month (the last changes were October 2025, April 2026, and June 2026). But if they move forward, you will get a boot error from the USB. This means just make the drive again.

Right now, neither Hasleo nor Macrium products keep track of SVN. But I suspect they'll eventually have to catch up. For improved security, a bootable Windows USB drive becomes unfortunately a moving target on the latest boot file versions.

Autobahn said:

I'll wait for a few more replies before going ahead, just to be sure.

Click to expand...

Complete guide is on the site just go to the section you need to look at.


Guide for adding to boot menu.

garlin said:

Last time I played with the free Hasleo, their Secure Boot support looked good for knowing where to find the CA 2023 files.

Click to expand...

Before version 5.8.2.2 they were just using the file located in C:\Program Files\Hasleo\Hasleo Backup Suite\bin\WADK\Boot\EFI_EX

You would get a SVN mismatch error booting rescue media if you revoked 2011 cert.

Now with 5.8.2.2 I think they have changed to using the file in C:\Windows\Boot\EFI_EX when creating rescue media.

The file in C:\Program Files\Hasleo\Hasleo Backup Suite\bin\WADK\Boot\EFI_EX is this size:



The file in C:\Windows\Boot\EFI_EX and when creating rescue media are both the same size but different than what is in Hasleo directory so I think that is what they are using now.

Autobahn said:

I want to add a Hasleo boot menu but I'm not sure about the drivers to be injected into WinPE.
Automatic driver injection is ticked.
What about 'Enable support for UEFI CA 2023? To enable this, I would have to tick 'Download WinPE components'.
The Secure Boot on my laptop currently has all required certificates.

Click to expand...

Click Proceed with the Emergency Disk build and then test your boot menu. If it boots fine, then mount your backup, select a file and try to restore it. If you have a network connected storage device check that you have access. All of this will confirm that all the necessary drivers are included. Otherwise some research will be required to determine what needs to be added. There is a good chance that everything is included.

To enable this, I would have to tick 'Download WinPE components'

Click to expand...

Is that because it can't find winre.wim or your winre.wim is not up to date.

SIW2 said:

Is that because it can't find winre.wim or your winre.wim is not up to date.

Click to expand...

Question, is acquiring an up to date winre.wim possible, and how? I know, stupid question. Thanks

starchase said:

Question, is acquiring an up to date winre.wim possible, and how? I know, stupid question. Thanks

Click to expand...

No, not a stupid question. Lot's of people have lost their WinRE.wim and had to replace it.

There's normally only one copy of Winre.wim. If the recovery environment is enabled it's in the recovery partition, if it's disabled it's in C:\Windows\System32\recovery. If you want to delete the recovery partition then you should disable the recovery environment first. If you delete it while enabled you'll loose your only copy of winre.wim. Failure to take this step before deleting the recovery partition is how most people loose their WinRE.wim.

Enable or Disable Windows Recovery Environment (WinRE) in Windows 11

If you have lost your winre.wim you can fix this. Just copy Winre.wim and ReAgent.xml back into C:\Windows\System32\Recovery. You can get these from the Windows install ISO for the version you are running. If you don't have the ISO, then download one from Microsoft.

Download Official Windows 11 ISO file from Microsoft

Mount the ISO by double-clicking on it. Open the install.wim or install.esd you'll find in the sources folder using 7-Zip file manager.