Tag: Verify the Bootloader Signature

Secure Boot 2023 Compliance Across WinPE, MDT, WDS, and ADK: Boot Chain Alignment and PXE Validation [Final Part]

Posted on Christian By Christian No Comments on Secure Boot 2023 Compliance Across WinPE, MDT, WDS, and ADK: Boot Chain Alignment and PXE Validation [Final Part]
Secure Boot 2023 Compliance Across WinPE, MDT, WDS, and ADK: Boot Chain Alignment and PXE Validation [Final Part]

Since my devices had secure boot update applied (SafeOS), the firmware and Secure Boot policy enforced stricter validation from the PC. While the deployment environment still served older ( mismatched boot files). This mismatch led to PXE failures, as the firmware refuses to execute the boot loaders that did not meet the minimum required version…

Read More “Secure Boot 2023 Compliance Across WinPE, MDT, WDS, and ADK: Boot Chain Alignment and PXE Validation [Final Part]” »

Windows, Windows Server

Update WinPE Boot Images with Windows UEFI CA Certificates [Part 2]

Posted on Christian By Christian No Comments on Update WinPE Boot Images with Windows UEFI CA Certificates [Part 2]
Update WinPE Boot Images with Windows UEFI CA Certificates [Part 2]

Secure Boot embeds into the Unified Extensible Firmware Interface (UEFI) and ensures that the system boots using only software trusted by the hardware vendor. As stated in this blogpost “Enable Secure Boot: Fix Secure Boot certificates expiration [Part 1]“. For 15 years, the Secure Boot certificates that are part of Windows systems will start expiring….

Read More “Update WinPE Boot Images with Windows UEFI CA Certificates [Part 2]” »

Windows Server