Solved Secure boot update HowTo


Well, I found out why my HP Spectre isn't successful with these instructions. My machine, which is Secure Boot enabled, was made in 2016 and HP says "Platforms released in 2017 and earlier do not receive a BIOS update related to this change, because HP no longer supports those platforms." And the "UEFICA2023Error" found in REGEDIT seems to indicate that a change in BIOS is required for success. Thanks to this thread for leading me to this HP link so I don't have to continue what is a futile attempt to run scripts in attempts to update the certs of this machine!
1763107904620.webp
 

My Computers My Computers

System One System Two Other systems

  • At a glance

    Windows 11 Home, ver 25H2 build 26200.8894Intel Core i5 5200U @ 2.20GH4 GBIntel HD Graphics 5500 on board
    OS
    Windows 11 Home, ver 25H2 build 26200.8894
    Computer type
    Laptop
    Manufacturer/Model
    Hewlett-Packard Spectre 13-4001 x360 convertable
    CPU
    Intel Core i5 5200U @ 2.20GH
    Motherboard
    Hewlett-Packard 802D
    Memory
    4 GB
    Graphics Card(s)
    Intel HD Graphics 5500 on board
    Sound Card
    Intel Smart Sound Technology (Intel SST)
    Hard Drives
    Micron 256GB M.2 2280 NGFF SSD MTFDDAV256TBN, (SATA 6.0 Gb/s)
    Keyboard
    Model # G01KB
    Antivirus
    Microsoft Defender
    Other Info
    born on date: 25 Feb 2016

  • At a glance

    Win 11 Home 25H2 build 26200.8894Intel Core i7 4th Gen 4790 (3.60GHz), Haswell...Samsung 16 GB DDR3 (8GB in 2 modules)NVIDIA GeForce GTX 760, 3GB, and on-board Int...
    Operating System
    Win 11 Home 25H2 build 26200.8894
    Computer type
    PC/Desktop
    Manufacturer/Model
    Asus Desktop model M32AD-US019S (DOM: 6/9/2014 )
    CPU
    Intel Core i7 4th Gen 4790 (3.60GHz), Haswell 22nm Technology, SOCKET 1150
    Motherboard
    H81M-E/M51AD/DP_MB
    Memory
    Samsung 16 GB DDR3 (8GB in 2 modules)
    Graphics card(s)
    NVIDIA GeForce GTX 760, 3GB, and on-board Intel HD Graphics 4600 Rev 6
    Monitor(s) Displays
    HP EliteDisplay E241i LED; HP EliteDisplay E243
    Hard Drives
    Samsung 500GB SSD, 870 EVO (SATA 6.0 )
    Micron 250GB SSD, CT250MX500
    Toshiba HDD, 3GB (original drive w/PC)
    Case
    ASUS
    Keyboard
    ASUS-------------------------
    Antivirus
    MS Defender
    Other Info
    purchased 8/28/2015 from Newegg.
  • HEWLETT PACKARD
    HP OmniBook X Flip NGAI (Next Gen AI),
    Model: 16-as0023dx
    PT# B5UH1UA#ABA Product #: B5UH1UA
    delivered and setup 7/25/25
    16" 2K Touch-Screen Laptop
    Intel Core Ultra 7 256V '24 Series 2 - CPU
    Boost Clock Frequency 4.8 gigahertz; Neural Processing Unit (NPU) Yes;
    16GB Memory, LPDDR5X
    1TB SSD PCIe 4.0
    Graphics: Intel Arc 140V
    1 x HDMI 2.1
    1 x Thunderbolt 4
    2K Touch-Screen display, LED, IPS; 1920 x 1200 (Full HD+)
    USB Ports: 1 x USB-C 3.1, 2 x USB-A 3.1
    Wi-Fi 6E

    DELL
    Model:I7591-7483BLK-PUS 2-in-1 (7000 Series)
    purchased new 12/3/2019,
    15.6 inch 2-IN-1;
    4K Ultra HD Touch-Screen, 3840 x 2160,
    Intel Core i7 10510U CPU 1.80GHz,
    16GB RAM DDR4 SDRAM 2400 megahert (2 slots),
    dedicated graphics Nvidia GeForce MX250 2 GB Graphics,
    PCIe 512GB Intel SSD + 32GB Optane Memory (Intel Optane Memory H10 with solid-state storage),
    wireless-AX & Bluetooth
    Battery: 68wh, Type 4VGMP 4 cell
Sheikh said:
Thank you so much for taking the time to build upon my initial code. I’m genuinely thrilled to see how you’ve expanded and refined it—it’s always a joy to witness ideas evolve through collaboration. Your improvements have added real value, and I deeply appreciate your effort and insight. Looking forward to more creative exchanges ahead!
Click to expand...
Thanks, I appreciate that! I think that I may have one logic bug somewhere, so I'll try to chase that down in the morning if I get a chance.
 

My Computers My Computers

System One System Two

  • At a glance

    Win11 Pro 26H2 (Release Preview)Intel i7-14650HX32 GBNo GPU - Built-in Intel Graphics
    OS
    Win11 Pro 26H2 (Release Preview)
    Computer type
    PC/Desktop
    Manufacturer/Model
    Acemagic Matrix M5
    CPU
    Intel i7-14650HX
    Memory
    32 GB
    Graphics Card(s)
    No GPU - Built-in Intel Graphics
    Sound Card
    Integrated
    Monitor(s) Displays
    Varies as machine will often be moved to locations with different monitors
    Screen Resolution
    Varies
    Hard Drives
    1 x 1TB Gen 4 NVMe SSD
    PSU
    120W Power Brick
    Keyboard
    Corsair K70 Max RGB Magnetic Keyboard
    Mouse
    Logitech MX Master 3
    Internet Speed
    1Gb Up / 1 Gb Down
    Browser
    Edge
    Antivirus
    Windows Defender

  • At a glance

    Win11 Pro 26H2 (Release Preview)Intel i7-1255U16 GBIntel Iris Xe Graphics
    Operating System
    Win11 Pro 26H2 (Release Preview)
    Computer type
    Laptop
    Manufacturer/Model
    Lenovo ThinkBook 13x Gen 2
    CPU
    Intel i7-1255U
    Memory
    16 GB
    Graphics card(s)
    Intel Iris Xe Graphics
    Sound Card
    Realtek® ALC3306-CG codec
    Monitor(s) Displays
    13.3-inch IPS Display
    Screen Resolution
    WQXGA (2560 x 1600)
    Hard Drives
    4 TB 4 x 4 NVMe SSD
    PSU
    USB-C / Thunderbolt 4 Power / Charging Using an Anker 160W Charger
    Keyboard
    Backlit, spill resistant keyboard
    Mouse
    Buttonless Glass Precision Touchpad
    Internet Speed
    1Gb Up / 1Gb Down
    Browser
    Edge
    Antivirus
    Windows Defender
    Other Info
    WiFi 6e / Bluetooth 5.1 / Facial Recognition / Fingerprint Sensor / ToF (Time of Flight) Human Presence Sensor
starchase said:
Well, I found out why my HP Spectre isn't successful with these instructions. My machine, which is Secure Boot enabled, was made in 2016 and HP says "Platforms released in 2017 and earlier do not receive a BIOS update related to this change, because HP no longer supports those platforms." And the "UEFICA2023Error" found in REGEDIT seems to indicate that a change in BIOS is required for success. Thanks to this thread for leading me to this HP link so I don't have to continue what is a futile attempt to run scripts in attempts to update the certs of this machine!
View attachment 152824
Click to expand...
What happens when you enter the PowerShell command:

[System.Text.Encoding]::ASCII.GetString((Get-SecureBootUEFI db).bytes) -match "Windows UEFI CA 2023"

Do you get a " True " response?

Unsupported devices should still be able to manually update the Windows UEFI CA 2023 certificate. OEM manufacturers are expected to update the KEK certificate (BIOS) for their products and share it with MS so that they in turn can push it to devices as an update.
 
Last edited:

My Computer My Computer

At a glance

Windows 11
OS
Windows 11
starchase said:
Well, I found out why my HP Spectre isn't successful with these instructions. My machine, which is Secure Boot enabled, was made in 2016 and HP says "Platforms released in 2017 and earlier do not receive a BIOS update related to this change, because HP no longer supports those platforms." And the "UEFICA2023Error" found in REGEDIT seems to indicate that a change in BIOS is required for success. Thanks to this thread for leading me to this HP link so I don't have to continue what is a futile attempt to run scripts in attempts to update the certs of this machine!
View attachment 152824
Click to expand...
When I contacted HP they told me to wait and stressed not to do it manually. They could not tell me when HP will address this! My HP ENVOY Laptop was made in 2021.
 

My Computer My Computer

At a glance

Windows 11 25H2 Home11th Generation Intel Core i712GB
OS
Windows 11 25H2 Home
Computer type
Laptop
Manufacturer/Model
HP ENVY Laptop 17m-ch1xxx
CPU
11th Generation Intel Core i7
Memory
12GB
Monitor(s) Displays
17.3” FHD Display
@XxXxX , @Brink ,

After running all of XxXxX's steps, my circa 2016 HP ProBook 4540s shows the following:

Capture.webp

Capture2.webp

The test command for PowerShell returns False.

HP gives no BIOS update since 2019.

Does this likely mean this system will be incapable of updating the Secure Boot keys, and unable to Secure Boot after the expiration in 2026? :(
 

My Computers My Computers

System One System Two

  • At a glance

    Windows 11 25H2Intel Core Ultra 7 26532GBNVIDIA GeForce RTX 3050 6GB
    OS
    Windows 11 25H2
    Computer type
    PC/Desktop
    Manufacturer/Model
    Dell Tower Plus EBT2250
    CPU
    Intel Core Ultra 7 265
    Memory
    32GB
    Graphics Card(s)
    NVIDIA GeForce RTX 3050 6GB
    Monitor(s) Displays
    2x Dell U2419H
    Hard Drives
    NVMe Phison 521GB SSD
    Seagate 2TB HDD
    (Dell installed them RAID enabled using Intel VMD)

  • At a glance

    Windows 11 25H2Intel Core i5-1334U8 GBIntel Raptor Lake-U - Integrated Graphics
    Operating System
    Windows 11 25H2
    Computer type
    Laptop
    Manufacturer/Model
    HP
    CPU
    Intel Core i5-1334U
    Motherboard
    HP 8DD7 - Intel Alder Lake-P PCH
    Memory
    8 GB
    Graphics card(s)
    Intel Raptor Lake-U - Integrated Graphics
    Hard Drives
    512 GB
Dirtyflash said:
What happens when you enter the PowerShell command:

System.Text.Encoding]::ASCII.GetString((Get-SecureBootUEFI db).bytes) -match "Windows UEFI CA 2023"

Do you get a " True " response?

Unsupported devices should still be able to manually update the Windows UEFI CA 2023 certificate. OEM manufacturers are expected to update the KEK certificate (BIOS) for their products and share it with MS so that they in turn can push it to devices as an update.
Click to expand...
I get a False response. Exact same data as @mta3006 above.
 

My Computers My Computers

System One System Two Other systems

  • At a glance

    Windows 11 Home, ver 25H2 build 26200.8894Intel Core i5 5200U @ 2.20GH4 GBIntel HD Graphics 5500 on board
    OS
    Windows 11 Home, ver 25H2 build 26200.8894
    Computer type
    Laptop
    Manufacturer/Model
    Hewlett-Packard Spectre 13-4001 x360 convertable
    CPU
    Intel Core i5 5200U @ 2.20GH
    Motherboard
    Hewlett-Packard 802D
    Memory
    4 GB
    Graphics Card(s)
    Intel HD Graphics 5500 on board
    Sound Card
    Intel Smart Sound Technology (Intel SST)
    Hard Drives
    Micron 256GB M.2 2280 NGFF SSD MTFDDAV256TBN, (SATA 6.0 Gb/s)
    Keyboard
    Model # G01KB
    Antivirus
    Microsoft Defender
    Other Info
    born on date: 25 Feb 2016

  • At a glance

    Win 11 Home 25H2 build 26200.8894Intel Core i7 4th Gen 4790 (3.60GHz), Haswell...Samsung 16 GB DDR3 (8GB in 2 modules)NVIDIA GeForce GTX 760, 3GB, and on-board Int...
    Operating System
    Win 11 Home 25H2 build 26200.8894
    Computer type
    PC/Desktop
    Manufacturer/Model
    Asus Desktop model M32AD-US019S (DOM: 6/9/2014 )
    CPU
    Intel Core i7 4th Gen 4790 (3.60GHz), Haswell 22nm Technology, SOCKET 1150
    Motherboard
    H81M-E/M51AD/DP_MB
    Memory
    Samsung 16 GB DDR3 (8GB in 2 modules)
    Graphics card(s)
    NVIDIA GeForce GTX 760, 3GB, and on-board Intel HD Graphics 4600 Rev 6
    Monitor(s) Displays
    HP EliteDisplay E241i LED; HP EliteDisplay E243
    Hard Drives
    Samsung 500GB SSD, 870 EVO (SATA 6.0 )
    Micron 250GB SSD, CT250MX500
    Toshiba HDD, 3GB (original drive w/PC)
    Case
    ASUS
    Keyboard
    ASUS-------------------------
    Antivirus
    MS Defender
    Other Info
    purchased 8/28/2015 from Newegg.
  • HEWLETT PACKARD
    HP OmniBook X Flip NGAI (Next Gen AI),
    Model: 16-as0023dx
    PT# B5UH1UA#ABA Product #: B5UH1UA
    delivered and setup 7/25/25
    16" 2K Touch-Screen Laptop
    Intel Core Ultra 7 256V '24 Series 2 - CPU
    Boost Clock Frequency 4.8 gigahertz; Neural Processing Unit (NPU) Yes;
    16GB Memory, LPDDR5X
    1TB SSD PCIe 4.0
    Graphics: Intel Arc 140V
    1 x HDMI 2.1
    1 x Thunderbolt 4
    2K Touch-Screen display, LED, IPS; 1920 x 1200 (Full HD+)
    USB Ports: 1 x USB-C 3.1, 2 x USB-A 3.1
    Wi-Fi 6E

    DELL
    Model:I7591-7483BLK-PUS 2-in-1 (7000 Series)
    purchased new 12/3/2019,
    15.6 inch 2-IN-1;
    4K Ultra HD Touch-Screen, 3840 x 2160,
    Intel Core i7 10510U CPU 1.80GHz,
    16GB RAM DDR4 SDRAM 2400 megahert (2 slots),
    dedicated graphics Nvidia GeForce MX250 2 GB Graphics,
    PCIe 512GB Intel SSD + 32GB Optane Memory (Intel Optane Memory H10 with solid-state storage),
    wireless-AX & Bluetooth
    Battery: 68wh, Type 4VGMP 4 cell
Dirtyflash said:
What happens when you enter the PowerShell command:

System.Text.Encoding]::ASCII.GetString((Get-SecureBootUEFI db).bytes) -match "Windows UEFI CA 2023"
Click to expand...

You are missing a bracket at the beginning.
Should be:

Code: 
[System.Text.Encoding]::ASCII.GetString((Get-SecureBootUEFI db).bytes) -match 'Windows UEFI CA 2023'
 

My Computer My Computer

At a glance

Windows 11 Pro
OS
Windows 11 Pro
Steve C said:
Or do nothing and let Windows Update fix the issue
Click to expand...
Like the "Reboot after update" feature that was broken for nearly a decade before they got around to fixing it?
 

My Computer My Computer

At a glance

Windows 11 22H2 Pro (X-lite Micro 11 version)i7 13850HX (20 cores, 28 threads)32GB DDR5Intel UHD/ RTX 1000 ADA
OS
Windows 11 22H2 Pro (X-lite Micro 11 version)
Computer type
Laptop
Manufacturer/Model
Dell/ Precision 7680
CPU
i7 13850HX (20 cores, 28 threads)
Motherboard
Dell
Memory
32GB DDR5
Graphics Card(s)
Intel UHD/ RTX 1000 ADA
Sound Card
Realtek
Monitor(s) Displays
4K UHD Touchscreen
Screen Resolution
3840 x 2400
Hard Drives
Samsung 512GB system drive
WD Blue 1TB game drive
PSU
240W AC adapter
Internet Speed
1 gigabit symmetrical
Browser
Firefox, Librewolf
Antivirus
None. Manully configured so nobody except me can change any critical system files. (Don't ask how, it's probably against some rule somewhere)
DJNelson said:
Like the "Reboot after update" feature that was broken for nearly a decade before they got around to fixing it?
Click to expand...
Or break your PC yourself by trying to do the above!
 

My Computer My Computer

At a glance

Windows 11 ProCore i7-13700K64 GB Kingston Fury Beast DDR5Gigabyte GeForce RTX 2060 Super Gaming OC 8G
OS
Windows 11 Pro
Computer type
PC/Desktop
Manufacturer/Model
Self build
CPU
Core i7-13700K
Motherboard
Asus TUF Gaming Plus WiFi Z790
Memory
64 GB Kingston Fury Beast DDR5
Graphics Card(s)
Gigabyte GeForce RTX 2060 Super Gaming OC 8G
Sound Card
Realtek S1200A
Monitor(s) Displays
Viewsonic VP2770 & Dell (secondary)
Screen Resolution
2560 x 1440
Hard Drives
Kingston KC3000 2TB NVME SSD & SATA HDDs & SSD
PSU
EVGA SuperNova G2 850W
Case
Nanoxia Deep Silence 1
Cooling
Noctua NH-D14
Keyboard
Microsoft Digital Media Pro
Mouse
Logitech Wireless
Internet Speed
80 Mb / s
Browser
Chrome
Antivirus
Defender, Malwarebytes Free & AdwCleaner
Steve C said:
Or break your PC yourself by trying to do the above!
Click to expand...
Yup. The hardest lesson to learn when working with PCs has been "don't change anything until you understand how it works"
 

My Computer My Computer

At a glance

Windows 11 22H2 Pro (X-lite Micro 11 version)i7 13850HX (20 cores, 28 threads)32GB DDR5Intel UHD/ RTX 1000 ADA
OS
Windows 11 22H2 Pro (X-lite Micro 11 version)
Computer type
Laptop
Manufacturer/Model
Dell/ Precision 7680
CPU
i7 13850HX (20 cores, 28 threads)
Motherboard
Dell
Memory
32GB DDR5
Graphics Card(s)
Intel UHD/ RTX 1000 ADA
Sound Card
Realtek
Monitor(s) Displays
4K UHD Touchscreen
Screen Resolution
3840 x 2400
Hard Drives
Samsung 512GB system drive
WD Blue 1TB game drive
PSU
240W AC adapter
Internet Speed
1 gigabit symmetrical
Browser
Firefox, Librewolf
Antivirus
None. Manully configured so nobody except me can change any critical system files. (Don't ask how, it's probably against some rule somewhere)
Steve C said:
Or do nothing and let Windows Update fix the issue?
Click to expand...
Yeah, it's a gamble. Key word being "fix". Windows Update has "fixed" many things for me in the past. Best to keep those backups fresh and handy for in the event that something gets "fixed".
 

My Computer My Computer

At a glance

WIN 11, WIN 10, WIN 8.1, WIN 7 U, WIN 7 PRO, ...Intel i7 6900K and i9-7960X / AMD 3800X (8 core)128 GB CORSAIR DOMINATOR PLATINUM (B DIE)NVIDIA 1070 and RTX 3070
OS
WIN 11, WIN 10, WIN 8.1, WIN 7 U, WIN 7 PRO, WIN 7 HOME (32 Bit), LINUX MINT
Computer type
PC/Desktop
Manufacturer/Model
DIY, ASUS, and DELL
CPU
Intel i7 6900K and i9-7960X / AMD 3800X (8 core)
Motherboard
ASUS X99E-WS USB 3.1 and ASUS X299 SAGE
Memory
128 GB CORSAIR DOMINATOR PLATINUM (B DIE)
Graphics Card(s)
NVIDIA 1070 and RTX 3070
Sound Card
Crystal Sound (onboard)
Monitor(s) Displays
single Samsung 30" 4K and 8" aux monitor
Screen Resolution
4K and something equally attrocious. I'll be working on this.
Hard Drives
A, B, C, D, E, F, G, H, I, J, K, L, M, N, O, P, Q, R, S, T, U, V, W

Ports X, Y, and Z are reserved for USB access and removable drives.

Drive types consist of the following: Various mechanical hard drives bearing the brand names, Seagate, Toshiba, and Western Digital. Various NVMe drives bearing the brand names Kingston, Intel, Silicon Power, Crucial, Western Digital, and Team Group. Various SATA SSDs bearing various different brand names.

RAID arrays included:

LSI RAID 10 (WD Velociraptors) 1115.72 GB
LSI RAID 10 (WD SSDS) 463.80 GB

INTEL RAID 0 (KINGSTON HYPER X) System 447.14 GB
INTEL RAID 1 TOSHIBA ENTERPRIZE class Data 2794.52 GB
INTEL RAID 1 SEAGATE HYBRID 931.51 GB
PSU
SEVERAL. I prefer my Corsair Platinum HX1000i but I also like EVGA power supplies
Case
ThermalTake Level 10 GT (among others)
Cooling
Noctua is my favorite and I use it in my main. I also own various other coolers.
Keyboard
all kinds.
Mouse
all kinds
Internet Speed
360 mbps - 1 gbps (depending)
Browser
FIREFOX
Antivirus
KASPERSKY (no apologies)
Other Info
Gave Dell touch screen with Windows 11 to daughter and got me an OTVOC. Being a PC builder I own many desktop PCs as well. I am a father of five providing PCs, laptops, and tablets for all my family, most of which I have modified, rebuilt, or simply built from scratch. I do not own a cell phone, never have, never will.
@XxXxX

OK, I finally got the results as shown in post #1.
I set Bitdefender firewall to Allow All.

And I used Terminal (Admin), instead of my old shortcuts to powershell (admin) and Command prompt (admin).

So... either the firewall change or using Terminal (Admin)... worked.


Image1.webp



Using Terminal (Admin)... and disabling the Bitdefender firewall... worked.

Image1.webp


Using my old (as Admin), Powershell and Command Prompt shortcuts... didn't work.

Image1.webp
 
Last edited:

My Computers My Computers

System One System Two

  • At a glance

    Win 11 Home ♦♦♦26300.9445 ♦♦♦♦♦♦♦26H2AMD Ryzen 7 3700XG.Skill (F4-3200C14D-16GTZKW)EVGA RTX 2070 (08G-P4-2171-KR)
    OS
    Win 11 Home ♦♦♦26300.9445 ♦♦♦♦♦♦♦26H2
    Computer type
    PC/Desktop
    Manufacturer/Model
    Built by Ghot® [May 2020]
    CPU
    AMD Ryzen 7 3700X
    Motherboard
    Asus Pro WS X570-ACE (BIOS 5302)
    Memory
    G.Skill (F4-3200C14D-16GTZKW)
    Graphics Card(s)
    EVGA RTX 2070 (08G-P4-2171-KR)
    Sound Card
    Realtek ALC1220P / ALC S1220A
    Monitor(s) Displays
    Dell U3011 30"
    Screen Resolution
    2560 x 1600
    Hard Drives
    2x Samsung 860 EVO 500GB,
    WD 4TB Black FZBX - SATA III,
    WD 8TB Black FZBX - SATA III,
    DRW-24B1ST CD/DVD Burner
    PSU
    PC Power & Cooling 750W Quad EPS12V
    Case
    Cooler Master ATCS 840 Tower
    Cooling
    CM Hyper 212 EVO (push/pull)
    Keyboard
    Ducky DK9008 Shine II Blue LED
    Mouse
    Logitech Optical M-100
    Internet Speed
    300/300
    Browser
    Firefox (latest)
    Antivirus
    Bitdefender Total Security
    Other Info
    Speakers: Klipsch Pro Media 2.1

  • At a glance

    Windows XP Pro 32bit w/SP3AMD Athlon 64 X2 5000+ (OC'd @ 3.2Ghz)TWIN2X2048-6400C4DHX (2 x 1GB, DDR2 800)EVGA 256-P2-N758-TR GeForce 8600GT SSC
    Operating System
    Windows XP Pro 32bit w/SP3
    Computer type
    PC/Desktop
    Manufacturer/Model
    Built by Ghot® (not in use)
    CPU
    AMD Athlon 64 X2 5000+ (OC'd @ 3.2Ghz)
    Motherboard
    ASUS M2N32-SLI Deluxe Wireless Edition
    Memory
    TWIN2X2048-6400C4DHX (2 x 1GB, DDR2 800)
    Graphics card(s)
    EVGA 256-P2-N758-TR GeForce 8600GT SSC
    Sound Card
    Onboard
    Monitor(s) Displays
    ViewSonic G90FB Black 19" Professional (CRT)
    Screen Resolution
    up to 2048 x 1536
    Hard Drives
    WD 36GB 10,000rpm Raptor SATA
    Seagate 80GB 7200rpm SATA
    Lite-On LTR-52246S CD/RW
    Lite-On LH-18A1P CD/DVD Burner
    PSU
    PC Power & Cooling Silencer 750 Quad EPS12V
    Case
    Generic Beige case, 80mm fans
    Cooling
    ZALMAN 9500A 92mm CPU Cooler
    Keyboard
    Logitech Classic Keybooard 200
    Mouse
    Logitech Optical M-BT96a
    Internet Speed
    300/300
    Browser
    Firefox 3.x ??
    Antivirus
    Symantec (Norton)
    Other Info
    Still assembled, still runs. Haven't turned it on for 15 years?
I have everything updated and correct at HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecureBoot according to MS latest documentation which I must add is much better than previously.

Assuming MS don't just start 'pushing out' further updates via Windows Update unannounced or without prior warning (not guaranteed :devilish:) my plan is:
1. Have multiple full system backups at all times via AOMEI Backupper of both my computers.
2. In the interim don't make any further manual changes to these Secure Boot settings on either my ASUS laptop or desktop PC (has an ASUS motherboard).
3. I'm not the guinea who tries out untested/unproven/unofficial 'fixes' regardless of the source whether it is from an online forum, ASUS or Microsoft.
4. My two machines are running fine currently so I don't see any point in running more PowerShell and/or Command Prompt commands that are the current fad.
 

My Computers My Computers

System One System Two

  • At a glance

    Windows 11 Pro 26H2Intel Core i9 13900KCorsair Dominator Platinum 64gb 5600MT/s DDR5...Sapphire NITRO+ AMD Radeon RX 7900 XTX Vapor-...
    OS
    Windows 11 Pro 26H2
    Computer type
    PC/Desktop
    Manufacturer/Model
    Homebuilt
    CPU
    Intel Core i9 13900K
    Motherboard
    Asus ProArt Z790 Creator WiFi - Bios 3202
    Memory
    Corsair Dominator Platinum 64gb 5600MT/s DDR5 Dual Channel
    Graphics Card(s)
    Sapphire NITRO+ AMD Radeon RX 7900 XTX Vapor-X 24GB
    Sound Card
    External DAC: Cambridge Audio DACMagic200M - Headphone Amps: Topping L70 & SMSL H400
    Monitor(s) Displays
    Samsung S95F OLED 55" TV
    Screen Resolution
    3840 x 2160 120hz
    Hard Drives
    Samsung 980 Pro 2TB (OS)
    Samsung 980 Pro 1TB (Files)
    Lexar NZ790 4TB
    LaCie d2 Professional 6TB external - USB 3.1
    Seagate Expansion 16TB external - USB 3.2
    Seagate One Touch 18TB external HD - USB 3.0
    PSU
    Corsair RM1200x Shift
    Case
    Corsair RGB Smart Case 5000x (white)
    Cooling
    NAUTILUS 360 RS Liquid CPU Cooler
    Keyboard
    Incase Ergonomic USB (Microsoft clone)
    Mouse
    Logitech MX Master 3S
    Internet Speed
    Fibre 900/500 Mbps
    Browser
    Microsoft Edge Chromium
    Antivirus
    Bitdefender Total Security
    Other Info
    AMD Radeon Software & Drivers
    Hasleo Backup Suite
    Dashlane password manager
    Kensington Verimark fingerprint reader
    Logitech Brio 4K webcam
    Orico 10-port powered USB 3.0 hub

  • At a glance

    Windows 11 Pro 25H2Intel® Core™ i9-13900H32GB DDR4-3200 Dual channel*Intel Iris Xᵉ Graphics G7
    Operating System
    Windows 11 Pro 25H2
    Computer type
    Laptop
    Manufacturer/Model
    Asus Vivobook X1605VA
    CPU
    Intel® Core™ i9-13900H
    Motherboard
    Asus X1605VA bios 309
    Memory
    32GB DDR4-3200 Dual channel
    Graphics card(s)
    *Intel Iris Xᵉ Graphics G7
    Sound Card
    Realtek | Intel SST Bluetooth & USB
    Monitor(s) Displays
    16.0-inch, WUXGA 16:10 aspect ratio, IPS-level Panel
    Screen Resolution
    1920 x 1200 60hz
    Hard Drives
    512GB M.2 NVMe™ PCIe® 3.0 SSD
    Mouse
    Logitech MX Ergo Trackball
    Antivirus
    Bitdefender Total Security
    Other Info
    720p Webcam
    WiFi & USB to ethernet
I think I am okay after running the scripts. EVGA X99 board from 2016.good.webp
 

My Computer My Computer

At a glance

Windows 11 25H2Broadwell-e 6850K 4.5ghz @1.36v32GB Corsair LPM 3600 C16EVGA RTX 3080Ti FTW
OS
Windows 11 25H2
Computer type
PC/Desktop
Manufacturer/Model
EVGA home brew
CPU
Broadwell-e 6850K 4.5ghz @1.36v
Motherboard
EVGA X99 FTW K
Memory
32GB Corsair LPM 3600 C16
Graphics Card(s)
EVGA RTX 3080Ti FTW
Sound Card
Asus Centurion true 7.1 headset. (5 speakers in each earpeice)
Monitor(s) Displays
LG C4 55"
Screen Resolution
4K 144hz
Hard Drives
Various models of SSDs ~10TB No HDDs installed.
PSU
be quiet! BN516 Straight Power 12-1000w 80 Plus Platinum
Case
Corsair 780T modified to dual 200mm intake fans
Cooling
Corsair H110i
Keyboard
Corsair K95 Platinum
Mouse
Corsair M65 RGB Elite
Internet Speed
50Mbs
When you get these results in the registry... you're done. :-)

Image1.webp
 

My Computers My Computers

System One System Two

  • At a glance

    Win 11 Home ♦♦♦26300.9445 ♦♦♦♦♦♦♦26H2AMD Ryzen 7 3700XG.Skill (F4-3200C14D-16GTZKW)EVGA RTX 2070 (08G-P4-2171-KR)
    OS
    Win 11 Home ♦♦♦26300.9445 ♦♦♦♦♦♦♦26H2
    Computer type
    PC/Desktop
    Manufacturer/Model
    Built by Ghot® [May 2020]
    CPU
    AMD Ryzen 7 3700X
    Motherboard
    Asus Pro WS X570-ACE (BIOS 5302)
    Memory
    G.Skill (F4-3200C14D-16GTZKW)
    Graphics Card(s)
    EVGA RTX 2070 (08G-P4-2171-KR)
    Sound Card
    Realtek ALC1220P / ALC S1220A
    Monitor(s) Displays
    Dell U3011 30"
    Screen Resolution
    2560 x 1600
    Hard Drives
    2x Samsung 860 EVO 500GB,
    WD 4TB Black FZBX - SATA III,
    WD 8TB Black FZBX - SATA III,
    DRW-24B1ST CD/DVD Burner
    PSU
    PC Power & Cooling 750W Quad EPS12V
    Case
    Cooler Master ATCS 840 Tower
    Cooling
    CM Hyper 212 EVO (push/pull)
    Keyboard
    Ducky DK9008 Shine II Blue LED
    Mouse
    Logitech Optical M-100
    Internet Speed
    300/300
    Browser
    Firefox (latest)
    Antivirus
    Bitdefender Total Security
    Other Info
    Speakers: Klipsch Pro Media 2.1

  • At a glance

    Windows XP Pro 32bit w/SP3AMD Athlon 64 X2 5000+ (OC'd @ 3.2Ghz)TWIN2X2048-6400C4DHX (2 x 1GB, DDR2 800)EVGA 256-P2-N758-TR GeForce 8600GT SSC
    Operating System
    Windows XP Pro 32bit w/SP3
    Computer type
    PC/Desktop
    Manufacturer/Model
    Built by Ghot® (not in use)
    CPU
    AMD Athlon 64 X2 5000+ (OC'd @ 3.2Ghz)
    Motherboard
    ASUS M2N32-SLI Deluxe Wireless Edition
    Memory
    TWIN2X2048-6400C4DHX (2 x 1GB, DDR2 800)
    Graphics card(s)
    EVGA 256-P2-N758-TR GeForce 8600GT SSC
    Sound Card
    Onboard
    Monitor(s) Displays
    ViewSonic G90FB Black 19" Professional (CRT)
    Screen Resolution
    up to 2048 x 1536
    Hard Drives
    WD 36GB 10,000rpm Raptor SATA
    Seagate 80GB 7200rpm SATA
    Lite-On LTR-52246S CD/RW
    Lite-On LH-18A1P CD/DVD Burner
    PSU
    PC Power & Cooling Silencer 750 Quad EPS12V
    Case
    Generic Beige case, 80mm fans
    Cooling
    ZALMAN 9500A 92mm CPU Cooler
    Keyboard
    Logitech Classic Keybooard 200
    Mouse
    Logitech Optical M-BT96a
    Internet Speed
    300/300
    Browser
    Firefox 3.x ??
    Antivirus
    Symantec (Norton)
    Other Info
    Still assembled, still runs. Haven't turned it on for 15 years?
Ghot said:
When you get these results in the registry... you're done. :-)

View attachment 153248
Click to expand...
Myself, I think I was finished before I started. :cool: I'll probably just wait for ye olde Windows screw you up-date.
Marcus Vinicus said:
I have everything updated and correct at HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecureBoot according to MS latest documentation which I must add is much better than previously.

Assuming MS don't just start 'pushing out' further updates via Windows Update unannounced or without prior warning (not guaranteed :devilish:) my plan is:
1. Have multiple full system backups at all times via AOMEI Backupper of both my computers.
2. In the interim don't make any further manual changes to these Secure Boot settings on either my ASUS laptop or desktop PC (has an ASUS motherboard).
3. I'm not the guinea who tries out untested/unproven/unofficial 'fixes' regardless of the source whether it is from an online forum, ASUS or Microsoft.
4. My two machines are running fine currently so I don't see any point in running more PowerShell and/or Command Prompt commands that are the current fad.
Click to expand...
Some folks like to play with the registry for learning and entertainment purposes. I have around a dozen PCs running in this place at any given time and I still don't have one that I can "practice on" . Perhaps one day I will. It would seem every time I build one for guinea pig practice I either find another practical use for it or I just give it to some child in need. lol
 

My Computer My Computer

At a glance

WIN 11, WIN 10, WIN 8.1, WIN 7 U, WIN 7 PRO, ...Intel i7 6900K and i9-7960X / AMD 3800X (8 core)128 GB CORSAIR DOMINATOR PLATINUM (B DIE)NVIDIA 1070 and RTX 3070
OS
WIN 11, WIN 10, WIN 8.1, WIN 7 U, WIN 7 PRO, WIN 7 HOME (32 Bit), LINUX MINT
Computer type
PC/Desktop
Manufacturer/Model
DIY, ASUS, and DELL
CPU
Intel i7 6900K and i9-7960X / AMD 3800X (8 core)
Motherboard
ASUS X99E-WS USB 3.1 and ASUS X299 SAGE
Memory
128 GB CORSAIR DOMINATOR PLATINUM (B DIE)
Graphics Card(s)
NVIDIA 1070 and RTX 3070
Sound Card
Crystal Sound (onboard)
Monitor(s) Displays
single Samsung 30" 4K and 8" aux monitor
Screen Resolution
4K and something equally attrocious. I'll be working on this.
Hard Drives
A, B, C, D, E, F, G, H, I, J, K, L, M, N, O, P, Q, R, S, T, U, V, W

Ports X, Y, and Z are reserved for USB access and removable drives.

Drive types consist of the following: Various mechanical hard drives bearing the brand names, Seagate, Toshiba, and Western Digital. Various NVMe drives bearing the brand names Kingston, Intel, Silicon Power, Crucial, Western Digital, and Team Group. Various SATA SSDs bearing various different brand names.

RAID arrays included:

LSI RAID 10 (WD Velociraptors) 1115.72 GB
LSI RAID 10 (WD SSDS) 463.80 GB

INTEL RAID 0 (KINGSTON HYPER X) System 447.14 GB
INTEL RAID 1 TOSHIBA ENTERPRIZE class Data 2794.52 GB
INTEL RAID 1 SEAGATE HYBRID 931.51 GB
PSU
SEVERAL. I prefer my Corsair Platinum HX1000i but I also like EVGA power supplies
Case
ThermalTake Level 10 GT (among others)
Cooling
Noctua is my favorite and I use it in my main. I also own various other coolers.
Keyboard
all kinds.
Mouse
all kinds
Internet Speed
360 mbps - 1 gbps (depending)
Browser
FIREFOX
Antivirus
KASPERSKY (no apologies)
Other Info
Gave Dell touch screen with Windows 11 to daughter and got me an OTVOC. Being a PC builder I own many desktop PCs as well. I am a father of five providing PCs, laptops, and tablets for all my family, most of which I have modified, rebuilt, or simply built from scratch. I do not own a cell phone, never have, never will.
Scannerman said:
Myself, I think I was finished before I started. :cool: I'll probably just wait for ye olde Windows screw you up-date.
Click to expand...
The other unknown is Bios updates in all this, will they be needed at all on which systems and does a bios update have to be applied before MS update Secure Boot and make our computers great again?
 

My Computers My Computers

System One System Two

  • At a glance

    Windows 11 Pro 26H2Intel Core i9 13900KCorsair Dominator Platinum 64gb 5600MT/s DDR5...Sapphire NITRO+ AMD Radeon RX 7900 XTX Vapor-...
    OS
    Windows 11 Pro 26H2
    Computer type
    PC/Desktop
    Manufacturer/Model
    Homebuilt
    CPU
    Intel Core i9 13900K
    Motherboard
    Asus ProArt Z790 Creator WiFi - Bios 3202
    Memory
    Corsair Dominator Platinum 64gb 5600MT/s DDR5 Dual Channel
    Graphics Card(s)
    Sapphire NITRO+ AMD Radeon RX 7900 XTX Vapor-X 24GB
    Sound Card
    External DAC: Cambridge Audio DACMagic200M - Headphone Amps: Topping L70 & SMSL H400
    Monitor(s) Displays
    Samsung S95F OLED 55" TV
    Screen Resolution
    3840 x 2160 120hz
    Hard Drives
    Samsung 980 Pro 2TB (OS)
    Samsung 980 Pro 1TB (Files)
    Lexar NZ790 4TB
    LaCie d2 Professional 6TB external - USB 3.1
    Seagate Expansion 16TB external - USB 3.2
    Seagate One Touch 18TB external HD - USB 3.0
    PSU
    Corsair RM1200x Shift
    Case
    Corsair RGB Smart Case 5000x (white)
    Cooling
    NAUTILUS 360 RS Liquid CPU Cooler
    Keyboard
    Incase Ergonomic USB (Microsoft clone)
    Mouse
    Logitech MX Master 3S
    Internet Speed
    Fibre 900/500 Mbps
    Browser
    Microsoft Edge Chromium
    Antivirus
    Bitdefender Total Security
    Other Info
    AMD Radeon Software & Drivers
    Hasleo Backup Suite
    Dashlane password manager
    Kensington Verimark fingerprint reader
    Logitech Brio 4K webcam
    Orico 10-port powered USB 3.0 hub

  • At a glance

    Windows 11 Pro 25H2Intel® Core™ i9-13900H32GB DDR4-3200 Dual channel*Intel Iris Xᵉ Graphics G7
    Operating System
    Windows 11 Pro 25H2
    Computer type
    Laptop
    Manufacturer/Model
    Asus Vivobook X1605VA
    CPU
    Intel® Core™ i9-13900H
    Motherboard
    Asus X1605VA bios 309
    Memory
    32GB DDR4-3200 Dual channel
    Graphics card(s)
    *Intel Iris Xᵉ Graphics G7
    Sound Card
    Realtek | Intel SST Bluetooth & USB
    Monitor(s) Displays
    16.0-inch, WUXGA 16:10 aspect ratio, IPS-level Panel
    Screen Resolution
    1920 x 1200 60hz
    Hard Drives
    512GB M.2 NVMe™ PCIe® 3.0 SSD
    Mouse
    Logitech MX Ergo Trackball
    Antivirus
    Bitdefender Total Security
    Other Info
    720p Webcam
    WiFi & USB to ethernet
Marcus Vinicus said:
The other unknown is Bios updates in all this, will they be needed at all on which systems and does a bios update have to be applied before MS update Secure Boot and make our computers great again?
Click to expand...
My friend, I'm not looking forward to it but I suspect that burden will be on the shoulders of ASUS (or whoever the manufacturer might be). MS would do well to include this information prior to the installation. (Perhaps it could be done in "Optional Updates"?) Alas, my ASUS BIOS is still "in search of the incredible" so I'm not holding my breath.
 

My Computer My Computer

At a glance

WIN 11, WIN 10, WIN 8.1, WIN 7 U, WIN 7 PRO, ...Intel i7 6900K and i9-7960X / AMD 3800X (8 core)128 GB CORSAIR DOMINATOR PLATINUM (B DIE)NVIDIA 1070 and RTX 3070
OS
WIN 11, WIN 10, WIN 8.1, WIN 7 U, WIN 7 PRO, WIN 7 HOME (32 Bit), LINUX MINT
Computer type
PC/Desktop
Manufacturer/Model
DIY, ASUS, and DELL
CPU
Intel i7 6900K and i9-7960X / AMD 3800X (8 core)
Motherboard
ASUS X99E-WS USB 3.1 and ASUS X299 SAGE
Memory
128 GB CORSAIR DOMINATOR PLATINUM (B DIE)
Graphics Card(s)
NVIDIA 1070 and RTX 3070
Sound Card
Crystal Sound (onboard)
Monitor(s) Displays
single Samsung 30" 4K and 8" aux monitor
Screen Resolution
4K and something equally attrocious. I'll be working on this.
Hard Drives
A, B, C, D, E, F, G, H, I, J, K, L, M, N, O, P, Q, R, S, T, U, V, W

Ports X, Y, and Z are reserved for USB access and removable drives.

Drive types consist of the following: Various mechanical hard drives bearing the brand names, Seagate, Toshiba, and Western Digital. Various NVMe drives bearing the brand names Kingston, Intel, Silicon Power, Crucial, Western Digital, and Team Group. Various SATA SSDs bearing various different brand names.

RAID arrays included:

LSI RAID 10 (WD Velociraptors) 1115.72 GB
LSI RAID 10 (WD SSDS) 463.80 GB

INTEL RAID 0 (KINGSTON HYPER X) System 447.14 GB
INTEL RAID 1 TOSHIBA ENTERPRIZE class Data 2794.52 GB
INTEL RAID 1 SEAGATE HYBRID 931.51 GB
PSU
SEVERAL. I prefer my Corsair Platinum HX1000i but I also like EVGA power supplies
Case
ThermalTake Level 10 GT (among others)
Cooling
Noctua is my favorite and I use it in my main. I also own various other coolers.
Keyboard
all kinds.
Mouse
all kinds
Internet Speed
360 mbps - 1 gbps (depending)
Browser
FIREFOX
Antivirus
KASPERSKY (no apologies)
Other Info
Gave Dell touch screen with Windows 11 to daughter and got me an OTVOC. Being a PC builder I own many desktop PCs as well. I am a father of five providing PCs, laptops, and tablets for all my family, most of which I have modified, rebuilt, or simply built from scratch. I do not own a cell phone, never have, never will.
XxXxX said:
i have put this together as i had problems updating 2 desktops and 3 laptops.
which have now all had their Secure Boot Certs updated to the new 2023 secure boot cert
also the other post about this were getting very long and confusing.
this is in two parts. part A and part B.
edit by me. please note, your system must be online for part A to update

Part A.
open a PowerShell as Admin
then copy and paste these two commands in this order.
thanks to @Brink tutorial.

1.


then press enter

2.


press enter and now restart your computer TWICE

##### to check that the 2023 cert is now available #####
to check that the 2023 cert is available after the 2 restarts
open a PowerShell as Admin copy and paste this command

the result of the command should show as 'True'

and then open the Windows registry to this key
Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecureBoot\Servicing

in the right window you will see ..
UEFICA2023Status which will show 'updating'
WindowsUEFICA2023Capable 0x00000001

close the registry and you can now begin part B.

######

Part B.
open a CMD Prompt as Admin
then copy and paste this command
thanks to @Scott

1. at the CMD Prompt as Admin


press enter and now close the CMD Prompt terminal

then open a PowerShell as Admin

2. within the PowerShell


press enter and restart you computer.

Final Check once the system has restarted
open the registry and find this key (again)
Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecureBoot\Servicing

in the right Window you will see ..
UEFICA2023Status which will now show 'Updated'
WindowsUEFICA2023Capable 0x00000002


your system is now updated to the new 2023 certs
if this post is in the wrong part of the Forum please move it to the correct one.

edit by me. missed this out .. your system needs to be online for the update to work
best of luck Steve ..
Click to expand...
I managed to get 2 Dell XPS 8940 and a Lenovo Yoga 920 updated, but on the Dell XPS 8930 I keep getting this and never gets to "Updated" status.
Any suggestion?
1763356290187.webp
 

My Computer My Computer

At a glance

Windows 11 Pro 25H2Intel I9-9900K64GBNVIDIA RTX 2060
OS
Windows 11 Pro 25H2
Computer type
PC/Desktop
Manufacturer/Model
Dell XPS 8930
CPU
Intel I9-9900K
Memory
64GB
Graphics Card(s)
NVIDIA RTX 2060
Sound Card
NVIDIA High Definition Audio
Monitor(s) Displays
4k Samsung
Screen Resolution
3840 x 2160
Hard Drives
512GB NVMe, ADATA SU 800, 2TB HDD
@fg2001gf11F
restart the system in to safe mode with network enabled.

then try the update part A in safe mode.
then after restarting TWICE
in an elevated PowerShell
[System.Text.Encoding]::ASCII.GetString((Get-SecureBootUEFI db).bytes) -match "Windows UEFI CA 2023"
Click to expand...

if the result comes back 'True'
then continue with part B.

best of luck Steve ..
 

My Computers My Computers

System One System Two

  • At a glance

    Windows 11 HomeRyzen 7 5825u64GB DDR4 3200Ryzen 7 5825u
    OS
    Windows 11 Home
    Computer type
    PC/Desktop
    Manufacturer/Model
    HP 24" AiO
    CPU
    Ryzen 7 5825u
    Motherboard
    HP
    Memory
    64GB DDR4 3200
    Graphics Card(s)
    Ryzen 7 5825u
    Sound Card
    Realtek External 5w speaker bar.
    Monitor(s) Displays
    24" HP AiO
    Screen Resolution
    1920 x 1080 @60 Hz
    Hard Drives
    1TB WD Blue SN580 M2 SSD Partitioned C:/D: drives.
    2x 1TB USB HDD External Backup/Storage.
    all VeraCrypt encrypted.
    PSU
    90W external power brick
    Case
    24" All in One
    Cooling
    Default Air Cooling
    Keyboard
    Dell WiFi UK extended
    Mouse
    Dell WiFi 3 Button
    Internet Speed
    1GB full fibre
    Browser
    Vivaldi Browser/Email/Calendar
    Antivirus
    AVG Internet Security/Windows Defender
    Other Info
    Mainly Open Source Software

  • At a glance

    Ubuntu 22.04.5 LTSi5 7200u16GB DDR4Intel
    Operating System
    Ubuntu 22.04.5 LTS
    Computer type
    Laptop
    Manufacturer/Model
    Dell 13" Latitude 2017
    CPU
    i5 7200u
    Motherboard
    Dell
    Memory
    16GB DDR4
    Graphics card(s)
    Intel
    Sound Card
    Intel
    Monitor(s) Displays
    13" Dell Laptop
    Hard Drives
    250GB Crucial 2.5" SSD
    Mouse
    Generic WiFi 3 button
    Internet Speed
    WiFi only
    Browser
    Firefox
    Antivirus
    ClamAV TK
    Other Info
    Mainly Open Source Software
You must log in or register to reply here.

Similar threads

Secure boot update via Windows update
Replies
3
Views
2K
hader
hader
Secure Boot Update Issue for 2014 Dell Laptop
Replies
7
Views
2K
SIW2
SIW2
Solved Successful manual update of Secure Boot on Dell XPS8930 with older BIOS that will never update.
2
Replies
23
Views
4K
trabel
T
Solved garlin's PowerShell scripts for updating Secure Boot CA 2023
185 186 187
Replies
4K
Views
340K
JamesSmith
J
Solved Secure Boot update failed to update a Secure boot variable - possible after 24H2 update
Replies
8
Views
11K
FreeBooter
FreeBooter

Latest Support Threads

Latest Tutorials

Back
Top Bottom