The PowerShell script described in this article can be used to update Windows bootable media so that the media can be used on systems that trust the “Windows UEFI CA 2023” certificate.

You'll see the following prompts: 1. Boot to WinPE to remediate the issue. It requires entering BitLocker recovery key if system disk is BitLocker encrypted. 2. Boot to WinPE configure safe mode and run repair command after entering safe mode. This option is less likely to require BitLocker recovery key if system disk is BitLocker encrypted.

It consists of a series of command-line utilities (both a traditional executable and a PowerShell module) to query and apply Secure Boot configurations locally to a machine.

These additional steps will create a bootable flash drive that uses boot files signed by the “Windows UEFI CA 2023” signing certificate. Go to a device where the July 8, 2025, or a later update and the first mitigation step (updating the Secure Boot DB) has been applied.

Installation media, such as a USB flash drive, can be used to install a new copy of Windows, perform a clean installation of Windows, or reinstall Windows. To create installation media, go to the software download website, where step-by-step instructions can be found.

Sur ce site web, vous pouvez sélectionner une version de Windows et créer un support d’installation sur une flash USB. Vous pouvez également créer un fichier ISO pour une utilisation sur des machines virtuelles ou pour graver le support d’installation sur un DVD :

The Recovery Drive utility in Windows is a valuable tool designed to back up essential system files needed to restore a PC to its original state. This utility creates a USB recovery media that can help you restore your Windows device to its factory settings, even if you replace the hard drive or completely wipe the drive. The recovery media includes built-in Windows files, any updates ...

Windows Recovery Environment (Windows RE) is a set of built‑in Windows tools designed to help troubleshoot and fix common system problems. If your PC has trouble starting, Windows RE can automatically launch and attempt to repair the issue. It also serves as a central starting point for advanced tools used in manual system recovery. Access to Windows Recovery Environment There are different ...

Run the following PowerShell script "GetWinReVersion.ps1" with Administrator credentials. After you run the script, you should receive the installed WinRE version as in the following example:

Back up your data If personal data and files need to be saved before reinstalling Windows, back them up before performing the reinstall. Personal data and files can be backed up to an external hard drive, USB flash drive, or a cloud location, such as OneDrive.