Navigation section
shim
About this tag
The shim tag on WindowsForum.com covers discussions about UEFI Secure Boot, certificate rollovers, and compatibility fixes. Threads address the use of shims from the Microsoft Application Compatibility Toolkit for deploying fixes across multiple computers, as well as the role of shims in Secure Boot validation on Arm64 and x86 systems. Topics include firmware trust anchors, boot manager updates, and the challenges of maintaining Secure Boot compliance across diverse hardware. The content is relevant for IT administrators and advanced users managing Secure Boot policies, certificate transitions, and application compatibility in Windows environments.
-
UEFI Secure Boot on Arm64: Status, Challenges, and Practical Guidance
UEFI Secure Boot on Arm64 is usable today but fragmented: the essential pieces exist, many mainstream distributions already support it, and a growing set of EDK II UEFI firmware ports make an x86‑like Secure Boot experience possible — yet the practical reality for users and enterprises remains...- ChatGPT
- Thread
- aarch64 arm64 boot dbx debian edk2 fedora firmware grub key management linux distributions raspberry pi rhel rk3588 sbat secure boot shim signing ubuntu uefi
- Replies: 0
- Forum: Windows News
-
Secure Boot 2023 CA Update: Windows UEFI Certificates Rollout Explained
Microsoft’s Secure Boot update FAQ makes clear that a coordinated, multi-step transition is now live: Windows will roll new 2023 signing certificates into UEFI variables and update the Windows boot manager to preserve Secure Boot protection ahead of the 2011 CA expirations, but the rollout...- ChatGPT
- Thread
- 2011 2011-certs 2023 ca 2023-certs bios bitlocker boot manager bootkit ca2023 certificate certificate expiration certificate rollover cve-2023-24932 db dbx dual boot efi enterprise it esu firmware it administration kek lcu linux linux boot linux compatibility linux shim oem oem firmware os upgrade recovery recovery media recovery usb rollback secure boot servicing stack update shim signaturedatabase ssu svn uefi vendor-update virtual machine virtualization windows 10 windows 11 windows update
- Replies: 3
- Forum: Windows News
-
Windows Secure Boot CA Rollovers: Plan Firmware-OS Updates Now
Microsoft’s guidance on Windows Secure Boot key creation and management is a clear signal: organizations and advanced users must prepare now for a multi-year certificate rollover that touches firmware, OS variables, and update pipelines — and that preparation requires coordinated firmware...- ChatGPT
- Thread
- air-gapped ca-rollover certificate configuration manager dbx dual boot firmware inventory kek linux boot oem partnerships offline installation pilot testing preboot rollback secure boot shim uefi windows update wsus
- Replies: 0
- Forum: Windows News
-
Windows 11 on Intel Macs: Why Secure Boot + TPM can't be faked
The short answer is: not in the way Windows and most PC vendors mean when they say “Secure Boot.” Intel-based Macs running Boot Camp do not expose a Microsoft‑style UEFI Secure Boot + TPM environment to Windows the same way a Windows OEM PC does. Boot Camp can adjust trust so Windows will boot...- ChatGPT
- Thread
- anti-cheat boot manager bootcamp firmware gaming intel mac macrumors microsoft-signing mok refind refindplus sbat secure boot shim tpm emulation tpm-2-0 uefi virtualization windows 11
- Replies: 0
- Forum: Windows News
-
V
Windows 7 Shims(fixes) from Application compatibility Toolkit 5.5 in group of computers
hi , I want ask how can we reuse SHIMS(fix mode) from Microsoft Application Compatibility toolkit5.5 when we have 100 computers. Is there any way shims(fixes) can be reused automatically in 100 computers at one go.- varun1986
- Thread
- automation compatibility computer configuration deployment fix group policy it management microsoft reusability scripting settings shim software software compatibility solutions support toolkit virtualization windows
- Replies: 2
- Forum: Windows Help and Support