and any HP system where its custom protection against performing db/dbx updates is enabled
also:
the file doesn't exist right now, but there's code (behind a registry(?) flag) to apply "dbxupdate2024.bin", and debug strings imply that would revoke the PCA 2011 cert entirely!(GetSecureBootUpdateFilePathPCA2011RevokeDBX)
i expected that to be done, but only on new systems, fun (given that it's behind a flag it may well happen only on new systems)
@wolf480pl IF older systems get the cert revoked it should be able to be reverted in the uefi firmware setup, which has an option to revert db/dbx back to the default (in the uefi firmware)
Add comment