This script retrieves and displays Secure Boot certificates and signatures (PK, KEK, DB, and DBX) from UEFI firmware and optionally saves them to files. The DBX (forbidden signatures) database contains both certificates and hashes that are blocked by Secure Boot.

This module provides functionality to check if a Windows system meets the hardware requirements for Windows 11. Based on Microsoft's official hardware readiness check script (https://aka.ms/HWReadinessScript) with minimal modifications to provide a more PowerShell-friendly interface. The module checks various hardware requirements including: - ... More info

PowerShell module for verifying the Windows UEFI CA 2023 Secure Boot certificate

Secure Boot CA 2023 certificate update detection script for Intune compliance.

Secure Boot CA 2023 certificate update remediation script for Intune compliance.

This discovery script evaluates the Secure Boot CA 2023 certificate update status on Windows 11 devices. It reads UEFI servicing registry values and returns a single string output suitable for SCCM CI rules. Possible return values: Compliant PendingRemediation PendingRestart ManualReview NotApplicable Recommended SCCM CI confi... More info

This remediation script performs the following actions: - Ensures AvailableUpdates includes 0x5944 (Secure Boot CA 2023). - Triggers the Windows Secure Boot update scheduled task when available. - Writes remediation metadata to registry. - Displays a restart notification popup in the active user session. - Allows SCCM to re-run remediatio... More info