10-17-2024, 10:36 AM
(10-16-2024, 03:54 PM)Van Flusen Wrote: This solution will also only work for a short time:
The enforcement phase of the Secure Boot changes related to CVE-2023-24932 will start in a few weeks.
The “Windows Production PCA 2011” certificate will automatically be revoked by being added to the Secure Boot UEFI Forbidden List (DBX) on capable devices.
These updates will be programmatically enforced after installing updates for Windows to all affected systems with no option to be disabled.
https://support.microsoft.com/en-gb/topi...ion5025885
Well, shit. I knew that was too good to be true. Sorry, I can't slog through the article just now, you seem to have a handle on the situation, does this mean that the shim will no longer work even when Secure Boot is turned off? Or will it work as previously, when Secure Boot is turned off?