https://www.configjon.com/category/secure-boot/Recent content in Secure-Boot on Jon's NotesHugoen-usWed, 21 Oct 2026 00:06:00 -0500https://www.configjon.com/secure-boot-2023-configmgr-osd/Wed, 21 Oct 2026 00:06:00 -0500https://www.configjon.com/secure-boot-2023-configmgr-osd/What the 2023 certificates and the KB5025885 revocations do to ConfigMgr PXE, boot images, and task sequence media: the two files the firmware checks, where they come from, and the order of operations.https://www.configjon.com/configmgr-2023-boot-loader-checkbox/Wed, 21 Oct 2026 00:05:00 -0500https://www.configjon.com/configmgr-2023-boot-loader-checkbox/What the 'Use Windows Boot Loader signed with Windows UEFI CA 2023' checkbox changes on the PXE responder, what it leaves alone, and how to prove what a client received.https://www.configjon.com/configmgr-wds-pxe-secure-boot-2023/Wed, 21 Oct 2026 00:04:00 -0500https://www.configjon.com/configmgr-wds-pxe-secure-boot-2023/One shared loader folder for every boot image, an inert checkbox, and the rule that decides which loaders every client gets: highest version wins, and equal versions never replace.https://www.configjon.com/patching-winpe-and-task-sequence-media-2026/Wed, 21 Oct 2026 00:03:00 -0500https://www.configjon.com/patching-winpe-and-task-sequence-media-2026/The monthly cumulative update on the ADK's winpe.wim and the two-file swap, with the common pitfalls: the checkpoint update, signatures and version strings, media and DVDs, and the upgrades that undo the patch.https://www.configjon.com/secure-boot-step-3-step-4-lab/Wed, 21 Oct 2026 00:02:00 -0500https://www.configjon.com/secure-boot-step-3-step-4-lab/What a device refuses after KB5025885 Steps 3 and 4, which file prints each 'Secure boot version check failed' number, what moves the Step 4 floor, and whether a task sequence can still deploy Windows to it.https://www.configjon.com/secure-boot-configmgr-reference/Wed, 21 Oct 2026 00:01:00 -0500https://www.configjon.com/secure-boot-configmgr-reference/Who can boot what, the version screen decoder, file sizes and signers, verification commands, registry bits and events, and a symptom table for ConfigMgr PXE and media after the 2023 certificates and the revocations.https://www.configjon.com/secure-boot-configmgr-tracker/Wed, 21 Oct 2026 00:00:00 -0500https://www.configjon.com/secure-boot-configmgr-tracker/Every Windows boot manager Security Version Number (SVN) since 2024, with KB, build, and size, plus the Step 3 and Step 4 floors and the current ADK and ConfigMgr levels. Updated monthly.