Orchestrate driver, BIOS/UEFI and firmware updates for Lenovo computers 👨‍💻

This script retrieves and displays Secure Boot certificates and signatures (PK, KEK, DB, and DBX) from UEFI firmware and optionally saves them to files. The DBX (forbidden signatures) database contains both certificates and hashes that are blocked by Secure Boot.

Update all HP device drivers with a single command.

Scripting Tools for Windows PowerShell : BIOS Cmdlets creates an interface to HPE BIOS ROM-Based Setup Utility (RBSU) or UEFI System Utilities. These cmdlets can be used to configure the BIOS settings on HPE ProLiant servers.

Determines underlying firmware type - Legacy BIOS or UEFI

PowerShell module for verifying the Windows UEFI CA 2023 Secure Boot certificate

A PowerShell download script for Microsoft Windows and UEFI Shell ISOs.

Secure Boot CA 2023 certificate update detection script for Intune compliance.

Secure Boot CA 2023 certificate update remediation script for Intune compliance.

Secure Boot and UEFI configuration audit toolkit — boot chain verification, DBX updates, boot policy, and firmware security assessment

This discovery script evaluates the Secure Boot CA 2023 certificate update status on Windows 11 devices. It reads UEFI servicing registry values and returns a single string output suitable for SCCM CI rules. Possible return values: Compliant PendingRemediation PendingRestart ManualReview NotApplicable Recommended SCCM CI confi... More info

This remediation script performs the following actions: - Ensures AvailableUpdates includes 0x5944 (Secure Boot CA 2023). - Triggers the Windows Secure Boot update scheduled task when available. - Writes remediation metadata to registry. - Displays a restart notification popup in the active user session. - Allows SCCM to re-run remediatio... More info