Hasleo Offine WinPE.OPE and 2023 Secure Boot Certificates

[garioch7]

Today I was successfully able to salvage my 2019 Dell XPS 8930 SE, which was destined to lose Secure Boot status because the 2011 Secure Boot Certificates are expiring at the end of the month.  Dell refused to provide a solution to update the Certificates for any of its computers sold more than five years ago.

I therefore had to learn how to manually add the necessary 2023 Secure Boot Certificates to the BIOS.  I was greatly assisted by a Guru at another Forum.

That brings up a question: does the Hasleo Offline WinPE.OPE file have to be recreated as a result?  My .OPE file dates back to 2026-04-23.

Have a great day.

Regards,
Phil

[al3x]

That brings up a question: does the Hasleo Offline WinPE.OPE file have to be recreated as a result?  My .OPE file dates back to 2026-04-23.

That OPE file you downloaded is just the Microsoft base image that is used for building your HBS WinPE.
You can download a newer version from time to time, but MS rarely offers new versions anyway.

The important part is that you check "Enable support for 'Windows UEFI CA 2023'" during the WinPE creation process:



In the last step before exporting your final ISO or copying over to USB it will also show this text in red:
"The current WinPE image ISO supports 'Windows UEFI CA 2023'"

If you can read this, your ISO will support the CA 2023 certificate.

Once MS has revoked the old 2011 certificate sometime later this year, you'll be able to test this by booting from your USB drive.
At the moment it doesn't matter what you've selected during the creation because MS currently still allows both certificates in BIOS.

[garioch7]

@al3x,

Thank you for your prompt and informative reply.  I will continue using my April .OPE file when building Emergency Disks, but will make sure that I check that option.

Have a great day.

Regards,
Phil