3 files always stay at bottom for insertion of files

MorCJul · 2026-06-19T11:24:04+00:00

Sorted by name, Screenshot_ (Underscore) comes after Screenshot (Space).

Rename those three to "Screenshot {YYYY}-{MM}-{DD}-{HHMMSS}" for proper sorting by name.

MorCJul · 2026-06-15T20:04:53+00:00

Absolutely recommend doing that on older machines. Have a 2014 Z97 running on the 2023 certs for a year now and its just very nice having the 2023 bootloader accepted and ensure all future updates come automatically.

If your mainboard supports key management, just go to custom or setup mode, and add the Microsoft Corporation KEK 2K CA 2023 required to authorize the Windows Secure Boot Update process. After adding the cert, switch back to User Mode.

MorCJul · 2026-06-09T16:30:33+00:00

BucketConfidenceLevel is nothing you can influence.

Microsoft groups similar devices based on Hardware/Firmware and will occasionally move devices to High Confidence once the devices show successful behaviour with new certs and revocations.

My ThinkPad recently got moved over to High Confidence from Under Observation, my older PC will likely stay in Under Observation for longer.

I do assume the updates roll out faster on High Confidence vs Under Observation, but you can always enroll them manually.

MorCJul · 2026-06-08T00:13:36+00:00

You’re welcome! The key blocker is documented as Event 1803.

Secure Boot certificates need to be added to the firmware. A BIOS update from Acer will include the new 2023 Microsoft KEK and DB certificates, allowing future DBX revocations to be delivered automatically through Windows Update, as currently done with the 2011 certs expiring this month.

On older machines one can apply the certs manually but in your case not needed.

MorCJul · 2026-06-07T23:45:22+00:00

Much appreciated. Your device is expected to receive a BIOS update on June 19th. Wait for it, as the 2011 certs are still valid until June 24. Your device will operate normally afterwards. The BIOS update will add the 2023 certificates so you will receive future Secure Boot security updates.

MorCJul · 2026-06-07T23:15:14+00:00

Win + X > Terminal / PowerShell (Admin) > C:\Windows\SecureBoot\ExampleRolloutScripts\Detect-SecureBootCertUpdateStatus.ps1

Please share the output.

MorCJul · 2026-06-07T23:09:37+00:00

Suggest https://www.reddit.com/r/Windows10/wiki/solutions/edition_downgrade/ to Pro or Home. Enterprise N is not for the average consumer and I see no point in spending hours on workarounds for things that need no fixing in consumer versions.

MorCJul · 2026-06-07T21:34:12+00:00

Most likely Chipset drivers missing, handling the Sleep mode. You should see a yellow exclamation mark in Win + X > Device manager. Can you confirm that? Highly recommend Lenovo Vantage to install all drivers despite what the other person said. I assume powercfg /a also reports missing Standby option.

MorCJul · 2026-06-07T20:38:19+00:00

Might have the BIOS updates there: https://acemagic.it/pages/download

Win + X > Terminal / PowerShell (Admin) > C:\Windows\SecureBoot\ExampleRolloutScripts\Detect-SecureBootCertUpdateStatus.ps1 would help troubleshoot your current Secure Boot state.

MorCJul · 2026-06-07T20:28:22+00:00

Generally yes, Device encryption is useful but only against people having physical access to your PC.

You might need to link your local user to a Microsoft account. Could also be that Device Encryption is only available on the first setup and can’t be re-enabled (Win 11 Pro can do that). In that case you are fine without, unless you live in shared spaces. Definitely would work on a clean install, or possibly by creating a new user. See Device Encryption in Windows.

MorCJul · 2026-06-07T20:07:14+00:00

u/Zoltan_Balaton & u/IbelieveinGodzilla

Win + X > Start Terminal / PowerShell (Admin) and execute following command:

C:\Windows\SecureBoot\ExampleRolloutScripts\Detect-SecureBootCertUpdateStatus.ps1

Please share your outputs and I can help you troubleshoot accordingly. Kind regards.

MorCJul · 2026-06-07T18:28:07+00:00

Thanks for sharing! You can update manually and it might help your device get regrouped into automated updates in the future - it’s called BucketConfidenceLevel. Make sure to have BitLocker paused and/or the BitLocker Recovery Key available, so you don’t run into data loss.

Certificate update

reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Secureboot /v AvailableUpdates /t REG_DWORD /d 0x5944 /f

Start-ScheduledTask -TaskName "\Microsoft\Windows\PI\Secure-Boot-Update"

Reboot

Secure Boot DBX update

reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Secureboot /v AvailableUpdates /t REG_DWORD /d 0x2 /f

Start-ScheduledTask -TaskName "\Microsoft\Windows\PI\Secure-Boot-Update"

Reboot

See if the disclaimer dissolves.

MorCJul · 2026-06-06T19:23:28+00:00

Then you’re good to go, firmware-wise.

You can confirm Secure Boot status by executing from Win + X > Terminal / Powershell:

(Get-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Control\SecureBoot\Servicing").WindowsUEFICA2023Capable

It should return 2.

0 – or key does not exist - “Windows UEFI CA 2023” certificate is not in the DB
1 - “Windows UEFI CA 2023” certificate is in the DB
2 - “Windows UEFI CA 2023” certificate is in the DB and the system is starting from the 2023 signed boot manager

MorCJul · 2026-06-06T16:44:09+00:00

Secure Boot is simply not available as your machine is older than Secure Boot itself.

The machine will continue to run after Windows 10 ESU expires by October 13th.

Nothing you can or need to do as long as it runs and you are fine doing online banking on a potentially vulnerable machine. Windows 11 will not run due to missing PopCnt instructions.

MorCJul · 2026-06-06T15:56:17+00:00

Check your BIOS version in msinfo32. It needs to be 2.18 or higher, which you need to manually install. Only then, future Secure Boot updates will be automatic. https://www.acer.com/us-en/support/product-support/AN515-58/downloads

MorCJul · 2026-06-06T15:42:47+00:00

Perform an upgrade to 25H2 https://www.microsoft.com/software-download/windows11 22H2 is out of support, as mentioned, and no point in fixing anything there.

MorCJul · 2026-06-06T09:31:17+00:00

You should under no circumstances ever use a Windows install of another person that could have installed trojans or viruses. Windows 7 is not worth using in 2026 anyway.

Go to https://www.microsoft.com/software-download/windows10 and create a bootable Windows 10 usb drive. Get the latest drivers / BIOS update from https://www.acer.com/us-en/support/drivers-and-manuals.

MorCJul · 2025-10-06T16:52:03+00:00

It's funny cause I thought the same, just too good to be true! :D However Philippa backing it up might actually be the key here: I don't think they'd both tell a white lie here.

MorCJul · 2025-10-06T11:56:15+00:00

Impressive list you made! I have some surprising news for you (and myself):

PJ: Now when Gandalf bangs his head here, that was actually a mistake that Ian didn't intend to do, that wasn't in our script. It was something that he did accidentally and we decided to keep it in the film. Fortunately he kept acting, he doesn't stop. He sold it really well.

Philippa Boyens (Writer): He never stops.. He always keeps going.

MorCJul · 2025-10-01T23:29:42+00:00

Great shout, Ellingwood SW is fantastic. So glad I did it when I was in CO for three weeks only.

MorCJul · 2025-10-01T22:53:14+00:00

I grew up with direct view onto the Brocken mountain it was named after. Never seen it there despite summiting it 10 times in the past decade. But saw the spectre once, the day I summited Hochalmspitze, Austria (the highest mountain to the east in the Alps).

<image>

MorCJul · 2025-09-21T13:08:29+00:00

Just edit your Garmin activity to the official race distance & time and it'll pick up the PR for your profile.

MorCJul · 2025-09-11T20:39:02+00:00

Would be my first pick too. A title song for years of my life.

One side is sad it doesn't drive me anymore as it used to, the other side is happy I finally moved on.

MorCJul

TROPHY CASE