CVE-2023-24932 revocation policy applied successfully on test device, but "not found" when re-imaged

[TimJButterworth]

Hi All,I'm preparing for when CVE-2023-24932 comes into full force: KB5025885: How to manage the Windows Boot Manager revocations for Secure Boot changes associated with CVE-2023-24932 - Microsoft SupportI deployed an August 2023 dated W10 image to a test laptop, applied the reg change etc and got the revocation changes to apply and the correct Event IDs to say the change was working.I then deployed another recent W10 image to the same device. The image installed fine, I updated it to latest CU and applied the reg change for the revocation policy which the Event Log says applied successfully.H

Continue reading...