[ARTICLE] Check secureboot CA 2023 certificates are installed on Windows 11
VARADHARAJAN K
9,711
Reputation points
Volunteer Moderator
Open powershell application, type following commads one by one
([System.Text.Encoding]::ASCII.GetString((Get-SecureBootUEFI kek).bytes) -match ‘Microsoft Corporation KEK 2K CA 2023’)
([System.Text.Encoding]::ASCII.GetString((Get-SecureBootUEFI db).bytes) -match ‘Windows UEFI CA 2023’)
([System.Text.Encoding]::ASCII.GetString((Get-SecureBootUEFI db).bytes) -match ‘Microsoft UEFI CA 2023’)
([System.Text.Encoding]::ASCII.GetString((Get-SecureBootUEFI db).bytes) -match ‘Microsoft option rom UEFI CA 2023’)
each time you see true means particular certificate is installed
The following cer's are complusary
‘Microsoft Corporation KEK 2K CA 2023’
‘Windows UEFI CA 2023’
‘Microsoft UEFI CA 2023’
‘Microsoft Option Rom UEFI CA 2023’
Or by using command prompt application run with admin rights
Powershell -command ([System.Text.Encoding]::ASCII.GetString((Get-SecureBootUEFI KEK).bytes) -match 'Microsoft Corporation KEK 2K CA 2023')
Powershell -command ([System.Text.Encoding]::ASCII.GetString((Get-SecureBootUEFI db).bytes) -match 'Windows UEFI CA 2023')
Powershell -command ([System.Text.Encoding]::ASCII.GetString((Get-SecureBootUEFI db).bytes) -match 'Microsoft UEFI CA 2023')
Powershell -command ([System.Text.Encoding]::ASCII.GetString((Get-SecureBootUEFI db).bytes) -match 'Microsoft Option ROM UEFI CA 2023')
Windows for business | Windows Server | Directory services | Certificates and public key infrastructure (PKI)
Locked Question. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.