Windows 11 revocations

Question

I applied the revocations to one Windows 11 computer. Later when needed, how will a bios update affect the revocations?

Reference:

https://support.microsoft.com/en-us/topic/kb5025885-how-to-manage-the-windows-boot-manager-revocations-for-secure-boot-changes-associated-with-cve-2023-24932-41a975df-beb2-40c1-99a3-b3ff139f832d#bkmk_mitigation_guidelines

And one more question, in the fixing boot media they have this line:

bcdboot c:\windows /f UEFI /s D: /bootex

What is  /bootex?

Answer 1

Hello Jimmiewhitaker , I'm Quinn, and I'm happy to assist you.

A BIOS update generally won't affect the Windows 11 revocations you've applied, as they are stored separately. However, it's wise to check for any BIOS settings related to Secure Boot that might be reset during the update and adjust them if needed.

The /bootex parameter in the command 'bcdboot c:\windows /f UEFI /s D: /bootex' ensures the boot files are correctly set up on the recovery media, making it bootable after the revocations. It installs the bootloader files on the system partition, allowing the operating system to start.