UNSOLVED
How To Check Secure Boot Certificates, the Dell way
The Secure Boot certificates can be checked from PowerShell. You must run PowerShell as Administrator
There are two methods:
Method 1
Check the Active DB:
Type,
([System.Text.Encoding]::ASCII.GetString((Get-SecureBootUEFI db).bytes) -match 'Windows UEFI CA 2023')
Note: The Active DB is what the computer uses to boot the computer.
These are the certificates that the operating system uses to Secure Boot the computer.
Check the Default DB:
Type,
([System.Text.Encoding]::ASCII.GetString((Get-SecureBootUEFI dbdefault).bytes) -match 'Windows UEFI CA 2023')
The Default DB is a backup copy of the Secure Boot DB. These are the certificates that are used to overwrite the Active DB when the BIOS requested to do so
Method 2
Note: For installation of the PowerShell module, an internet connection is required.
Install the PowerShell Module
Type,
Install-Module -Name UEFIv2
Type Y (for yes) to questions asked about installing NuGet provider and installing from PSGallery
Type,
Set-ExecutionPolicy -ExecutionPolicy RemoteSigned
Type,
Import-Module -Name UEFIv2
Checking the Active DB:
Type,
(Get-UEFISecureBootCerts db).signature
The Active DB is what the computer uses to boot the machine. These are the certificates that the operating system uses to Secure Boot the computer.
Check the Default DB:
Type,
(Get-UEFISecureBootCerts dbdefault).signature
Note: The Default DB is a backup copy of the Secure Boot DB. These are the certificates that are used to overwrite the Active DB when the BIOS requested to do so
Note: Not all certificates show on every Certificate. The important certificates for booting Windows are Microsoft Windows Production PCA 2011 and Windows UEFI CA 2023.
(edited)
