Windows 10: Windows 11 revocations

I applied the revocations to one Windows 11 computer. Later when needed, how will a bios update affect the revocations? Reference:https://support.microsoft.com/en-us/topic/kb5025885-how-to-manage-the-windows-boot-manager-revocations-for-secure-boot-changes-associated-with-cve-2023-24932-41a975df-beb2-40c1-99a3-b3ff139f832d#bkmk_mitigation_guidelinesAnd one more question, in the fixing boot media they have this line:bcdboot c:\windows /f UEFI /s D: /bootexWhat is /bootex?

:)

 

How to check that the UEFI DBX revocation list is in good state ? (Error message while updating UEFI DBX revocation list )

I did an update of the UEFI DBX revocation list in windows 11 (build 22361) but I get an error message . The update was the following :

"Microsoft guidance for applying Secure Boot DBX update (KB4575994)".

But after this I get an error message (something like the text : "system.date not ok .....) . I did all instructions but the first instruction did generate the error message. Now I presume that the revocation list is damaged.

I am a Windows Insider of the Release Preview Channel and currently have build 22361.2861 (release 23H2) , with TPM module enabled. I do not have any problems except that I do not know wether this revocation list is damaged or not.

How can I reset this UEFI DBX revocation list in Windows ? My target is that I want to have the UEFI DBX revocation list in good state. Not important it is last version or not (preferably last version of course) . If not possible to reset : how can I know in Windows the state of the UEFI revocation list ?

 

in ie 11 win 10 in internet options advanced tab security should server revocation and publisher's certificate revocation be checked or unchecked?

see above ? I will repeat in ie 11 win 10 internet options advanced tab security should server revocation and publisher's certificate revocation be checked or unchecked?

 

Using Bcdboot repair after appling Windows Boot Manager revocations for Secure Boot changes

The revocations aren't affected even if I reformat the efi partition prior to using Bcdboot?

I did all of this and it booted fine, but there isn't any revocation code stored on the efi partition? I am just double checking this stuff. I thought the revocations list was too big to store everything inside the bios chip.

Sorry for being a stickler for details.