aleunge

Seem to have hit an error trying this on an HP z620. Can't write the KEK and DBX and met with an error: Set-SecureBootUefi : Incorrect authentication data: 0xC0000022 At line:1 char:1 + Set-SecureBootUefi -AppendWrite -Name KEK -ContentFilePath C:\TEMP\co ... + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : PermissionDenied: (Microsoft.Secur...BootUefiCommand:SetSecureBootUefiCommand) [Set-Secu reBootUEFI], UnauthorizedAccessException + FullyQualifiedErrorId : SetFWVarFailed,Microsoft.SecureBoot.Commands.SetSecureBootUefiCommand Any idea? Thanks!!!

Wow. Thank you so much for this!! Just tried it on an old HP EliteBook 2170P and it worked great! Will be doing this to another oldie zBook 17 G2 and will report back after. Just a note that the installed script is now at: C:\Program Files\WindowsPowerShell\Scripts\SplitDbxContent.ps1 instead of in Documents. I'm on Windows 11 25H2 if that matters. And is it still good if only the second these two returns true? - ([System.Text.Encoding]::ASCII.GetString((Get-SecureBootUEFI pk).bytes) -match 'Microsoft RSA Third Party PCA 2023') - FALSE - ([System.Text.Encoding]::ASCII.GetString((Get-SecureBootUEFI pk).bytes) -match 'Hewlett-Packard') - TRUE Update: worked great on a zBook 17 G2 as well! Had to pause BitLocker throughout the process as it was enabled on that one but all worked out just the same. Thank you again!