Intel® NUCs
Support for Intel® NUC products
Announcements
Do you have improvements you would like us to make on this community site? If so, we would love to hear your feedback! Click here for an 8 question survey. Thanks!

11321 Discussions

Looking for restoration information for secure boot files KEK and DB

User1584596687741318
229 Views

I've somehow managed to uninstall both key exchange key and signature database from the secure boot config on my nuc7i7dnhe. I'm trying to load a clean installation of windows10 on the machine but am currently unable to do so using secure boot without these two files installed. I've check with running uefi syscfg /secureboot and attempted to overwrite both of the files with blank data to see if this would reset with the original data but this did not work. I've also tried to recover, reset, upgrade, and restore to default the visualbios and these do not load the needed files for secureboot with any of these.

Does anyone know where to go from here or have a correct pair of "PKpub,KEK, db, and dbx"?

Thanks!

 

0 Kudos
3 Replies
AdrianM_Intel
Moderator
105 Views

Hello User15845966877413180015,

 

Thank you for posting on the Intel® communities.  

 

We understand that the key/files "KEK and DB" were removed from the secure boot. Based on the description provided I would suggest contacting Microsoft* support for further assistance regarding Windows Secure Boot Key Creation and Management Guidance.

 

Best regards,

 

Adrian M.

Intel Customer Support Technician

 

User1584596687741318
105 Views

Hey AdrianM,

 

Thank you for your input, Just to make sure we are on the same page before i go and connect with Microsoft. There is no way of restoring the default keys that where shipped within the bios of the NUC and that i need to regenerate my own through Microsoft support instead?

 

Thank you,

AdrianM_Intel
Moderator
105 Views

Hello User15845966877413180015,

 

Thank you for your reply.

 

You might try to use the following commands that can be used to get SMBIOS information from an Intel® NUC System > Serial number: Get-WmiObject Win32_BIOS SerialNumber you might need to have Windows* 10 since this commands can be run Windows tools such as Powershell and WMIC there is no a command from the BIOS, for this reason, it will be good to contact MS* support for further assistance regarding Windows Secure Boot Key Creation and Management Guidance.

 

Best regards,

 

Adrian M.

Intel Customer Support Technician

 

 

 

Reply