- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I've somehow managed to uninstall both key exchange key and signature database from the secure boot config on my nuc7i7dnhe. I'm trying to load a clean installation of windows10 on the machine but am currently unable to do so using secure boot without these two files installed. I've check with running uefi syscfg /secureboot and attempted to overwrite both of the files with blank data to see if this would reset with the original data but this did not work. I've also tried to recover, reset, upgrade, and restore to default the visualbios and these do not load the needed files for secureboot with any of these.
Does anyone know where to go from here or have a correct pair of "PKpub,KEK, db, and dbx"?
Thanks!
- Tags:
- Intel® NUC 7th Gen
Link Copied
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hello User15845966877413180015,
Thank you for posting on the Intel® communities.
We understand that the key/files "KEK and DB" were removed from the secure boot. Based on the description provided I would suggest contacting Microsoft* support for further assistance regarding Windows Secure Boot Key Creation and Management Guidance.
Best regards,
Adrian M.
Intel Customer Support Technician
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hey AdrianM,
Thank you for your input, Just to make sure we are on the same page before i go and connect with Microsoft. There is no way of restoring the default keys that where shipped within the bios of the NUC and that i need to regenerate my own through Microsoft support instead?
Thank you,
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hello User15845966877413180015,
Thank you for your reply.
You might try to use the following commands that can be used to get SMBIOS information from an Intel® NUC System > Serial number: Get-WmiObject Win32_BIOS SerialNumber you might need to have Windows* 10 since this commands can be run Windows tools such as Powershell and WMIC there is no a command from the BIOS, for this reason, it will be good to contact MS* support for further assistance regarding Windows Secure Boot Key Creation and Management Guidance.
Best regards,
Adrian M.
Intel Customer Support Technician

- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page