windows 10 iso file with ca 2023

ok was just currious cause i had been geeting a boot error of version higher than installed i think or it could be installed higher than boot version . thats why i had not re added them back in . btw i did what u suggested about the upp dump . have not tested it yet by banning the 2011 ca yet . kinda leary tbh. wonder when ms might start revoking them prob not anytime soon since esu has been extended to 2027

As I wrote in another thread, the SVN challenge is the same for both W10 ESU & W11.

Every time there's a new boot manager released, the SVN gets bumped up and we need a new install image. For W11 users, they have the luxury that MCT releases a fully updated ISO every month. W10 users are in more difficult waters, because they either need to learn DISM updating of their install images, or learn how to use UUP dump.

Or realistically, some people will give up and temporarily disable Secure Boot. They will install from whatever ISO they get their hands on, hopefully run (and wait for) Windows Update to bring them up to the latest W10 version. Run something like my update script, which will push a new boot file and any missing certs that their outdated image didn't provide. And eventually re-enable Secure Boot.

What people don't understand is W10 ESU isn't really meant to help you run W10. It's there to encourage you to update. MS doesn't want to provide updated W10 ISO's because that would make people think they should stay on W10. If you had to re-install Windows, MS would ask why don't you just jump to W11 now?

Well as always Garlin saved the day. after following his details in post 51. I have windows 10 running and dual booting from the ca 2023 cert. now the 2011 has been revoked.
hopefully this big headache about keys and certs is finally done. here are the final results as I pronounce this chapter dead for good.
this is an almost 14-year-old machine.


Secure Boot: ON
Virtualization Based Security: OFF
BitLocker on (C:) OFF

UEFI KEK Certs
--------------
Microsoft Corporation KEK CA 2011
Microsoft Corporation KEK 2K CA 2023

UEFI DB Certs
-------------
Microsoft Corporation UEFI CA 2011
Microsoft Windows Production PCA 2011
Microsoft Option ROM UEFI CA 2023
Microsoft UEFI CA 2023
Windows UEFI CA 2023

UEFI DBX Certs
--------------
Microsoft Windows Production PCA 2011
Windows BootMgr SVN 9.0

EFI Files
---------
Windows Boot Manager [Windows UEFI CA 2023] is ALLOWED.
Registry: "WindowsUEFICA2023Capable" = 2
[Windows UEFI CA 2023] in UEFI DB, and Windows starting from CA 2023 Boot Manager.


STATUS REPORT
-------------
Registry: "UEFICA2023Status" = Updated

SUCCESS: UPDATES ARE FINISHED.

FIREMEDIC2700 said:

Well as always Garlin saved the day. after following his details in post 51. I have windows 10 running and dual booting from the ca 2023 cert. now the 2011 has been revoked.
hopefully this big headache about keys and certs is finally done. here are the final results as I pronounce this chapter dead for good.
this is an almost 14-year-old machine.

Click to expand...

well done. so there will be no need for me to post the Rufus USB drive to you.
best of luck Steve ..