How to create secure boot svn 9.0 boot flash?

Hi, so I have a laptop which working fine with the installed W11 25H2, but I cannot create a flash drive which would make a boot.

- laptop bios is up to date (HP 850 G8, HP 835 G11, HP G2a)
- certificate settings are fine
- if I turn off the secure boot in the bios I can boot
- I can turn off the secure boot, reset bios settings, turn back - doesn't help

I am getting a message that current version is 7.0, but the required minimum is 9.0

- I am downloading the newest ISO from Microsoft
- I am using their Make2023BootableMedia.ps1 script
- certificate looks OK on the flash drive

What do I miss? Did I get a wrong image from MS? Or the problem is not with the flash?

1. This recovery ISO is 26200.8037, or March 2026. Your PC's UEFI has been updated to SVN 9.0, or June 2026.

2. You will need to create a new recovery ISO, since now the UEFI requires a boot file that is SVN 9.0 or a higher version. Or you can temporarily disable Secure Boot, use the recovery drive, update Windows to the latest Monthly Update, and then re-enable Secure Boot mode.

3. What version of the Check_Boot-Media.ps1 script are you using? I see the SVN number isn't being reported. Try this version of the same script.

Thanks Garlin,

I ran your script on a different computer which doesn't have secure boot turned on. Since it's a flash drive check script, I didn't expect the computer where I am running it, matters.

If I run on a laptop which is involved in the question, I am getting this results:



So I guess the image on the flash drive is too old, I should download the newest monthly cumulative update, bake into the flash drive with dism, and I will get a higher version of svn (hopefully 9.0)?

June 2026 was SVN 9.0. September is now SVN 11.0. If you're going to make a new USB, I would update to September first so you don't waste your time.

If you make an ISO with a higher SVN, it will always boot on a system where the SVN hasn't been updated yet. SVN 11.0 will boot on anything SVN 11.0 or lower in the UEFI. Basically anything from June 2026 or earlier in time.