Skip to content

README.md

Latest commit

 

History

History
34 lines (22 loc) · 1.17 KB

README.md

File metadata and controls

34 lines (22 loc) · 1.17 KB
Raw

SecureBoot Inspector

Portable Windows 11 application for checking Secure Boot state and reading Secure Boot signature databases from UEFI variables.

Copyright by Dr. René Bäder (PhDs)

License: GNU General Public License v3.0 or later.

Features

  • Checks firmware type and Secure Boot state.
  • Reads SecureBoot, SetupMode, AuditMode, and DeployedMode.
  • Reads and parses Secure Boot databases PK, KEK, db, and dbx.
  • Displays X.509 certificate subject, issuer, expiry date, and thumbprint.
  • Displays SHA-256 signature entries.
  • Can copy or save a text report.

Build

dotnet publish -c Release -r win-x64 --self-contained true /p:PublishSingleFile=false /p:PublishReadyToRun=false -o bin\Release\SecureBootInspector-portable

The portable application folder is created in:

bin\Release\SecureBootInspector-portable

Notes

Start SecureBootInspector.exe with "Run as administrator" because reading UEFI variables normally requires SeSystemEnvironmentPrivilege.

The app is published as a portable folder instead of a single-file EXE because the single-file Windows apphost can fail on some systems with loader error 0xc0000142.