"Microsoft guidance for applying Secure Boot DBX update" "boothole" "nessus scan" "none cumulative revocation list"

[PaulJohnson4535]

I followedMicrosoft guidance for applying Secure Boot DBX updateAll seemed well but nessus scan says" The Windows Secure Boot forbidden signature database (DBX) did not contain the expected certificates. When performing DBX updates exactly as illustrated in the vendor documentation, it is important to note that you are applying only the latest update. Updates applied in this manner may only appended to the DB, so you may still need to apply the older updates from the "Archive of Prior Versions of DBX Files" linked in the UEFI Revocation List File document (linked in the See Also advisory). Ple

Continue reading...