PowerShell Logo Small

Get-SecureBootUEFI



This is the built-in help made by Microsoft for the command 'Get-SecureBootUEFI', in PowerShell version 5 - as retrieved from Windows version 'Microsoft Windows Server 2012 R2 Standard' PowerShell help files on 2016-06-23.

For PowerShell version 3 and up, where you have Update-Help, this command was run just before creating the web pages from the help files.

SYNOPSIS

Gets the UEFI variable values related to Secure Boot such as the SetupMode, SecureBoot, KEK, PK, SignatureDatabase, and forbidden SignatureDatabase.

SYNTAX


Get-SecureBootUEFI [-Name] <String> [-OutputFilePath <String>] [<CommonParameters>]



Search powershellhelp.space

DESCRIPTION


The Get-SecureBootUEFI cmdlet gets the UEFI variable values related to Secure Boot which are: SetupMode, SecureBoot, KEK, PK, SignatureDatabase (DB), and forbidden
SignatureDatabase (DBX).


If the computer does not support Secure Boot or is a BIOS (non-UEFI) computer, then this cmdlet will return an error displaying the following: Cmdlet not supported on this
platform.


If the variable does not exist, then this cmdlet will return an error displaying the following: Variable is currently undefined.


If Windows PowerShell® is not run in administrator mode, then this cmdlet will return an error displaying the following: Unable to set proper privileges. Access was denied.



<

RELATED LINKS

Online Version: http://go.microsoft.com/fwlink/p/?linkid=289486
Confirm-SecureBootUEFI
Format-SecureBootUEFI
Get-SecureBootPolicy
Set-SecureBootUEFI

REMARKS

<

Examples


EXAMPLE 1

PS C:\>Get-SecureBootUefi –Name PK | Format-List
Name : PK
Bytes : {161, 89, 192, 165...}
Attributes : NON VOLATILE
BOOTSERVICE ACCESS
RUNTIME ACCESS
TIME BASED AUTHENTICATED WRITE ACCESS



This example gets information about PK from the UEFI variable.