Windows 10: Can't sign in to get UEFI-key for private drives

Hello,This is maybe a little bit stupid...I made a new Windows install on a drive that that was not my primary drive for my Windows 10. So then I had 2 Windows OS on two drives. I also had some other drives. Then I enabled UEFI for in BIOS and logged into the Windows 11 and made it a company device. Then I set my private drives to "Offline" in diskpart and then I deleted the computer in Azure. Then I logged into my old Windows 10 and then my drives is not UEFI encrypted. Now I logged back into the the Windows 11 - and I could access all my drives. Then I made my computer sleep. Then I tried lo

:)

 

AMIBIOS Source Code and AMI's UEFI Signing Key Leaked

An FTP server in Taiwan that could be publicly accessed, leaked the source code of AMI Aptio UEFI BIOS, including AMI's unique UEFI signing test key. The utterly irresponsible act of holding such sensitive data on public FTPs is suspected to be committed by motherboard vendor Jetway. In doing so, the company may have compromised security of every motherboard (across vendors) running AMI Aptio UEFI BIOS. Most socket LGA1155 and FM2 motherboards, and some socket AM3+ motherboards run AMI Aptio.

Among the leaked bits of software include the source code of AMI BIOS, Aptio, and AMI's UEFI test signing key, which is used by all its clients to sign their BIOS updates. Signing ensures that BIOS updating software verifies the update is genuine, and coming from the motherboard manufacturer. With this key out, malware developers can develop malicious BIOS updates, hack motherboard vendors' customer support websites, and replace legitimate BIOS updates with their malicious ones. Control over the system BIOS could then give hackers access to most ring-0 OS functions.





"By leaking this key and the firmware source, it is possible (and simple) for others to create malicious UEFI updates that will be validated & installed for the vendor's products that use this firmware. If the vendor used this same key for other products - the impact could be even worse," writes Adam Caudill, who along with Brandon Wilson, discovered the open FTP server. "This kind of leak is a dream come true for advanced corporate espionage or intelligence operations. The ability to create a nearly undetectable, permanent hole in a system's security is an ideal scenario for covert information collection," he added.

Source: Adam Caudill's Blog

 

Install Windows 10 using UEFI bootable USB thumb drive

You need to go into you system bios and select allow uefi usb drive. Then add the UEFI usb drive to the boot menu

better way to partition aand create an bootable usb.

For the UEFI system, we can use these steps to create the bootable USB:

1.Locate a 4GB or larger USB flash drive

2.Open Diskpart and run the following command cmd admin type diskpart

• Type DiskPart in the command prompt.
• Type "List Disk” (make note of the disk number of the target USB drive).
• Type "Select Disk X”, where X is the target USB drive noted in step 4.
• Type "Clean”.
• Type "Create Partition Primary”.
• Type "format FS=fat32 quick”.
• Type "Active”.
• Type "Assign".
• Type "Exit".

Copy your ISO files to the drive and reboot

never use UEFI it better to repartition and remove UEFI go with legacy bois

 

how do I export certificates and/or private keys?

Hi,

Thank you for posting your query on Microsoft Community. Let me assist you.

I suggest you to follow the below steps to export a certificate with a private key

1. Open the Certificates console for the user, computer, or service you want to manage.

2. In the console pane, select the certificate store and container holding the certificate that you want to export.

3. In the details pane, click the certificate you want to export.

4. On the Action menu, point to
All Tasks, and then click Export.

5. In the Certificate Export Wizard, click
Yes, export the private key. (This option will appear only if the private key is marked as exportable and you have access to the private key.)

6. Under Export File Format, do one or all of the following, and then click
Next.

• To include all certificates in the certification path, select the
  Include all certificates in the certification path if possible check box.
• To enable strong protection, select the Enable strong protection (requires IE 5.0, NT 4.0 SP4 or above) check box.
• To delete the private key if the export is successful, select the
  Delete the private key if the export is successful check box.

7.In Password, type a password to encrypt the private key you are exporting. In
Confirm password, type the same password again, and then click
Next.

8. In File name, type a file name and path for the PKCS #12 file that will store the exported certificate and private key, click
Next, and then click Finish.

Hope this information is helpful. Please do let us know if you need further assistance, we’ll be glad to assist you.