Solved Latest Macrium Reflect X updates

snerd · Saturday at 10:05 AM

Stigg said:
Is anyone else seeing advertising in Reflect X?

Yes sir...............................

Caledon Ken · Saturday at 11:18 AM

I imagine the subscription model is impacting sales.

Josey Wales · Sunday at 2:45 PM

Zardoc said:
Keep us updated Josey on what Macrium says about it. Thanks.

Well I have not heard from MR yet, so I turned off Secure Boot and was able to restore an image from 7.09.26 but it was a hassle with security question and such to log back in. I probably will hear from them tomorrow.

KevTech · Sunday at 3:27 PM

Hasleo is ahead of Macrium on this issue as it now creates rescue media that will boot even if you revoke 2011 cert.

Josey Wales · Sunday at 5:47 PM

KevTech said:
Hasleo is ahead of Macrium on this issue as it now creates rescue media that will boot even if you revoke 2011 cert.

i have 1 1/2 years to go on my MR X license. I will stick with it.

KevTech · Sunday at 6:11 PM

Josey Wales said:
i have 1 1/2 years to go on my MR X license. I will stick with it.

When I was using Macrium and had revoked the 2011 cert I found I could update the rescue media using this command and no more SVN mismatch error at boot.
May need to change drive letter from F: if yours is different.

Code:

copy C:\Windows\Boot\EFI_EX\bootmgfw_EX.efi F:\EFI\boot\bootx64.efi

Josey Wales · Sunday at 6:26 PM

KevTech said:
When I was using Macrium and had revoked the 2011 cert I found I could update the rescue media using this command and no more SVN mismatch error at boot.
May need to change drive letter from F: if yours is different.

Code:

copy C:\Windows\Boot\EFI_EX\bootmgfw_EX.efi F:\EFI\boot\bootx64.efi

Were you using Secure Boot and MR X?? This will all be sorted out soon, so I am not worried about it.

KevTech · Sunday at 6:43 PM

Josey Wales said:
Were you using Secure Boot and MR X?? This will all be sorted out soon, so I am not worried about it.

Yes and there was no issue until I revoked the 2011 so I then updated the boot media with that command.

Bree · Sunday at 6:49 PM

KevTech said:
When I was using Macrium and had revoked the 2011 cert I found I could update the rescue media using this command and no more SVN mismatch error at boot.
May need to change drive letter from F: if yours is different.

Code:

copy C:\Windows\Boot\EFI_EX\bootmgfw_EX.efi F:\EFI\boot\bootx64.efi

That is literally all there is to it. You are copying a boot manager that has a CA 2023 certificate to your boot media to replace the one with the old certificate. Works with Reflect v8 too, Free or Home.

My System One laptop was demoted from use as my 'main machine' when its hinges started to break up. It's now my 'secure boot' test platform. It also has no CA 2023 bios update from Acer (and may never get one) so I used Garlin's scripts to update it and to revoke 2011. The first thing I did was make a Reflect Free rescue USB and manually update it's boot file to 2023 with that command - worked perfectly.

PerpetualCycle · Sunday at 6:50 PM

Stigg said:
Is anyone else seeing advertising in Reflect X?

Just a small one for their stuff. Really a notice about a discount - I think that is fine.

Don't understand this Macriumangst.

Josey Wales · Sunday at 7:46 PM

Bree said:
That is literally all there is to it. You are copying a boot manager that has a CA 2023 certificate to your boot media to replace the one with the old certificate. Works with Reflect v8 too, Free or Home.

My System One laptop was demoted from use as my 'main machine' when its hinges started to break up. It's now my 'secure boot' test platform. It also has no CA 2023 bios update from Acer (and may never get one) so I used Garlin's scripts to update it and to revoke 2011. The first thing I did was make a Reflect Free rescue USB and manually update it's boot file to 2023 with that command - worked perfectly.

Well I ran that and now I am back to where I was Failure status 0Xc00042p

Josey Wales · Sunday at 7:56 PM

I will wait for MR. I am now back online without secure boot. Thanks anyway.

garlin · Sunday at 8:08 PM

I'm presuming the actual error message is:

0xc0000428: Windows cannot verify the digital signature for this file

You're welcome to wait for MR support. I dunno how long it takes for them to ask if you have a SkuSiPolicy file deployed to your EFI volume.

This policy file can block booting from a device if you have an out-of-date WinRE. Windows Security works in lockstep from the Monthly Updates. You may get a newer boot manager or a SkuSiPolicy file, which replaces the old version (due to a security fix).

The goal is to block outdated boot files, so attackers can't use them to get inside your Windows. But this means you might need to refresh the WinRE to keep pace.

In the short term, you can remove the SkuSiPolicy (it's not that difficult to re-install it in the future).

Code:

mountvol S: /s
del S:\EFI\Microsoft\Boot\SkuSiPolicy.p7b
mountvol S: /d

Josey Wales · Sunday at 8:43 PM

garlin said:
I'm presuming the actual error message is:

You're welcome to wait for MR support. I dunno how long it takes for them to ask if you have a SkuSiPolicy file deployed to your EFI volume.

This policy file can block booting from a device if you have an out-of-date WinRE. Windows Security works in lockstep from the Monthly Updates. You may get a newer boot manager or a SkuSiPolicy file, which replaces the old version (due to a security fix).

The goal is to block outdated boot files, so attackers can't use them to get inside your Windows. But this means you might need to refresh the WinRE to keep pace.

In the short term, you can remove the SkuSiPolicy (it's not that difficult to re-install it in the future).

Code:

mountvol S: /s del S:\EFI\Microsoft\Boot\SkuSiPolicy.p7b mountvol S: /d

They are kind of old.

man00 · 2026-07-13T09:49:09-0400

does anyone know if I make a backup with paid ver 8 after I update 2023 certs, and revoke 2011 cert will the backup actually work?

Josey Wales · 2026-07-13T11:38:56-0400

garlin said:
I'm presuming the actual error message is:

You're welcome to wait for MR support. I dunno how long it takes for them to ask if you have a SkuSiPolicy file deployed to your EFI volume.

This policy file can block booting from a device if you have an out-of-date WinRE. Windows Security works in lockstep from the Monthly Updates. You may get a newer boot manager or a SkuSiPolicy file, which replaces the old version (due to a security fix).

The goal is to block outdated boot files, so attackers can't use them to get inside your Windows. But this means you might need to refresh the WinRE to keep pace.

In the short term, you can remove the SkuSiPolicy (it's not that difficult to re-install it in the future).

Code:

mountvol S: /s del S:\EFI\Microsoft\Boot\SkuSiPolicy.p7b mountvol S: /d

I heard from MR. They said to uninstall like below. I did and I shall try a restore later.

Josey Wales · 2026-07-13T11:51:30-0400

It works now. Thanks everyone.

man00 · 2026-07-13T11:56:19-0400

Is this normal after updating 2023 certs, and removing the 2011 ones

garlin · 2026-07-13T12:05:38-0400

man00 said:
Is this normal after updating 2023 certs, and removing the 2011 ones

No, but it can indicate bcdboot (or updates to the BCD store) weren't correctly applied.
This script can restore a missing WinRE entry.

1. Run as Admin (use the correct folder path to the script file):

Code:

powershell -ep bypass -f \download\folder\Fix_Disabled_WinRE.ps1

2. Restart Windows.

What this script does is repopulate the BCD entry, and creates a RunOnce task to run "reagentc /enable" when Windows starts. By the time you logon, "reagentc /info" should report a normal looking WinRE.

Zardoc · 2026-07-13T12:56:34-0400

Josey Wales said:
I heard from MR. They said to uninstall like below. I did and I shall try a restore later.
View attachment 176570

Hey Josey, Thanks for the followup. So does this mean if you reinstall there is a new PE created or the or the newly created is backwards compatible?

Solved Latest Macrium Reflect X updates

Viewing your Upgrade Options​

Attachments

Well-known member

My Computers My Computers

At a glance

At a glance

Well-known member

My Computer My Computer

At a glance

Endeavor to Persevere

My Computers My Computers

At a glance

At a glance

Well-known member

My Computer My Computer

At a glance

Endeavor to Persevere

My Computers My Computers

At a glance

At a glance

Well-known member

My Computer My Computer

At a glance

Endeavor to Persevere

My Computers My Computers

At a glance

At a glance

Well-known member

My Computer My Computer

At a glance

Well-known member

My Computers My Computers

At a glance

At a glance

Syzygy

My Computers My Computers

At a glance

At a glance

Endeavor to Persevere

My Computers My Computers

At a glance

At a glance

Endeavor to Persevere

My Computers My Computers

At a glance

At a glance

Well-known member

My Computer My Computer

At a glance

Endeavor to Persevere

My Computers My Computers

At a glance

At a glance

Well-known member

My Computer My Computer

At a glance

Endeavor to Persevere

My Computers My Computers

At a glance

At a glance

Endeavor to Persevere

My Computers My Computers

At a glance

At a glance

Well-known member

My Computer My Computer

At a glance

Well-known member

Attachments

My Computer My Computer

At a glance

Dazed & Confused

My Computer My Computer

At a glance

Similar threads

Viewing your Upgrade Options

My Computers

My Computer

My Computers

My Computer

My Computers

My Computer

My Computers

My Computer

My Computers

My Computers

My Computers

My Computers

My Computer

My Computers

My Computer

My Computers

My Computers

My Computer

My Computer

My Computer