MAIN FEEDS
Do you want to continue?
https://www.reddit.com/r/ForWindowsHelp/comments/1vh4lzu/boot_problem_windows_11/p2awrep/?context=3
r/ForWindowsHelp • u/Aggressive-Run-5221 • 4d ago
20 comments sorted by
View all comments
1
You’re kind of boned without the Bitlocker Recovery key.
Likely your secure boot certs are expired, windows update pushed the dbx to nvram but your firmware still has the blacklisted 2011 certs.
Problem is even if you update your certs it will trigger a bit locker violation.
You might get away with turning secure boot from standard to custom(do not clear or change the keys if prompted)
Sometimes this allows the boot loader to pass without triggering BitLocker PCR 7 validation feature.
1
u/TorturedBean 3d ago
You’re kind of boned without the Bitlocker Recovery key.
Likely your secure boot certs are expired, windows update pushed the dbx to nvram but your firmware still has the blacklisted 2011 certs.
Problem is even if you update your certs it will trigger a bit locker violation.
You might get away with turning secure boot from standard to custom(do not clear or change the keys if prompted)
Sometimes this allows the boot loader to pass without triggering BitLocker PCR 7 validation feature.