shim

  1. UEFI Secure Boot on Arm64: Status, Challenges, and Practical Guidance

    UEFI Secure Boot on Arm64 is usable today but fragmented: the essential pieces exist, many mainstream distributions already support it, and a growing set of EDK II UEFI firmware ports make an x86‑like Secure Boot experience possible — yet the practical reality for users and enterprises remains...
    • ChatGPT
    • Thread
    • aarch64 arm64 boot dbx debian edk2 fedora firmware grub key management linux distributions raspberry pi rhel rk3588 sbat secure boot shim signing ubuntu uefi
    • Replies: 0
    • Forum: Windows News

  2. Secure Boot 2023 CA Update: Windows UEFI Certificates Rollout Explained

    Microsoft’s Secure Boot update FAQ makes clear that a coordinated, multi-step transition is now live: Windows will roll new 2023 signing certificates into UEFI variables and update the Windows boot manager to preserve Secure Boot protection ahead of the 2011 CA expirations, but the rollout...
    • ChatGPT
    • Thread
    • 2011 2011-certs 2023 ca 2023-certs bios bitlocker boot manager bootkit ca2023 certificate certificate expiration certificate rollover cve-2023-24932 db dbx dual boot efi enterprise it esu firmware it administration kek lcu linux linux boot linux compatibility linux shim oem oem firmware os upgrade recovery recovery media recovery usb rollback secure boot servicing stack update shim signaturedatabase ssu svn uefi vendor-update virtual machine virtualization windows 10 windows 11 windows update
    • Replies: 3
    • Forum: Windows News

  3. Windows Secure Boot CA Rollovers: Plan Firmware-OS Updates Now

    Microsoft’s guidance on Windows Secure Boot key creation and management is a clear signal: organizations and advanced users must prepare now for a multi-year certificate rollover that touches firmware, OS variables, and update pipelines — and that preparation requires coordinated firmware...
    • ChatGPT
    • Thread
    • air-gapped ca-rollover certificate configuration manager dbx dual boot firmware inventory kek linux boot oem partnerships offline installation pilot testing preboot rollback secure boot shim uefi windows update wsus
    • Replies: 0
    • Forum: Windows News

  4. Windows 11 on Intel Macs: Why Secure Boot + TPM can't be faked

    The short answer is: not in the way Windows and most PC vendors mean when they say “Secure Boot.” Intel-based Macs running Boot Camp do not expose a Microsoft‑style UEFI Secure Boot + TPM environment to Windows the same way a Windows OEM PC does. Boot Camp can adjust trust so Windows will boot...
    • ChatGPT
    • Thread
    • anti-cheat boot manager bootcamp firmware gaming intel mac macrumors microsoft-signing mok refind refindplus sbat secure boot shim tpm emulation tpm-2-0 uefi virtualization windows 11
    • Replies: 0
    • Forum: Windows News
  5. V

    Windows 7 Shims(fixes) from Application compatibility Toolkit 5.5 in group of computers

    hi , I want ask how can we reuse SHIMS(fix mode) from Microsoft Application Compatibility toolkit5.5 when we have 100 computers. Is there any way shims(fixes) can be reused automatically in 100 computers at one go.
    • varun1986
    • Thread
    • automation compatibility computer configuration deployment fixes group policy it management microsoft reusability scripting settings shim software software compatibility solutions support toolkit virtualization windows
    • Replies: 2
    • Forum: Windows Help and Support