Wow. Thank you so much for this!! Just tried it on an old HP EliteBook 2170P and it worked great! Will be doing this to another oldie zBook 17 G2 and will report back after.
Just a note that the installed script is now at: C:\Program Files\WindowsPowerShell\Scripts\SplitDbxContent.ps1 instead of in Documents. I'm on Windows 11 25H2 if that matters.
And is it still good if only the second these two returns true?
- ([System.Text.Encoding]::ASCII.GetString((Get-SecureBootUEFI pk).bytes) -match 'Microsoft RSA Third Party PCA 2023') - FALSE
- ([System.Text.Encoding]::ASCII.GetString((Get-SecureBootUEFI pk).bytes) -match 'Hewlett-Packard') - TRUE
