Windows 10: Boot thumb drive with revocations

I applied the revocations to one Windows 11 computer:https://support.microsoft.com/en-us/topic/kb5025885-how-to-manage-the-windows-boot-manager-revocations-for-secure-boot-changes-associated-with-cve-2023-24932-41a975df-beb2-40c1-99a3-b3ff139f832d#bkmk_mitigation_guidelinesI fixed my boot usb by following:COPY D:\EFI\MICROSOFT\BOOT\BCD D:\EFI\MICROSOFT\BOOT\BCD.BAKbcdboot c:\windows /f UEFI /s D: /bootexCOPY D:\EFI\MICROSOFT\BOOT\BCD.BAK D:\EFI\MICROSOFT\BOOT\BCDAs per instructions and it boots fine on the computer with the revocations. However

:)

 

Using Bcdboot repair after appling Windows Boot Manager revocations for Secure Boot changes

Hi

Thanks for your reply.

Reformatting the EFI partition should not affect the revocations. The revocation codes are typically stored in the Secure Boot database, which is separate from the EFI partition. The EFI partition mainly contains boot files and configuration data for the operating system.

The revocation codes are used by the Secure Boot process to check the integrity and authenticity of the loaded operating system. These codes are typically stored in the firmware or BIOS chip, not the EFI partition.

It is normal not to see the revocation codes stored on the EFI partition as they are usually managed by the firmware or BIOS. The revocation list itself may be too large to store entirely on the BIOS chip, but the necessary information and algorithms are stored there to verify the codes during the boot process.

 

Using Bcdboot repair after appling Windows Boot Manager revocations for Secure Boot changes

The revocations aren't affected even if I reformat the efi partition prior to using Bcdboot?

I did all of this and it booted fine, but there isn't any revocation code stored on the efi partition? I am just double checking this stuff. I thought the revocations list was too big to store everything inside the bios chip.

Sorry for being a stickler for details.

 

I am attempting to do a clean install of Windows 11. (Aurora r13) installation media on a USB thumb drive.

I was able to successfully create the installation media on a USB thumb drive. However, when I performed the steps for the actual installation I got up to the Use a device screen but my thumb drive does not appear on the list. The two options that do appear are: Onboard NIC (IPV4) and Onboard NIC (IPV6). Suggestions? Thanks.