IFW - Boot problem

[Fracso]

I created a boot UFD WinPE ISO, using IFW 3.61a and Windows 11 22H2 WADK.

Then I applied the revocations for CVE-2023-24932.

I can´t boot with the UFD and Secure Boot enabled. The UFD appears in the boot menu, but after I select it to boot from it, the boot proceeds normally from the internal disk. No error message appears.

With Secure Boot disabled, the computer boots from the UFD without any problem.

But if I create a WinPE 10 ISO, using Windows 10 WADK, the UFD boots to the IFW interface, with Secure Boot enabled.

So, is it a problem with the Windows 11 WADK? Or is it another kind of problem?

[TeraByte Support(PP)]

If the Windows 10 build boots then I'd guess it's likely an issue specific to the Windows 11 ADK.

Does it boot on any other system with Secure Boot enabled?

Can you provide the build log for the build that doesn't boot? You can email it to support if you don't want to post it here.

[Fracso]

I can´t check on another computer. I only applied the revocations in one computer, and I don´t want to go further until the situation is clear.

As I am really not too worried about the bootkit, I will wait for MS to apply the revocations forcefully to the other computers.

The problem may be related to the fact that the ADK for Windows 11 needs to be patched, but MS hasn´t done it yet. It can apparently be patched manually, via DISM, but that´s too much hassle.

The problem is not critical, because WinRE and IFL work well after the revocations, with Secure Boot enabled.

What seems strange to me is that ADK for Windows 10 works well, without any patching.

This is the build log. I think the problem is not here, because the UFD boots with Secure Boot disabled.
---------------------------------------------------------------------------
2023-08-02 17:13:12 - TBWinPE/RE Builder v1.34
2023-08-02 17:13:12 - Initializing
2023-08-02 17:13:12 - Windows version: Windows 10 Pro [10.0.19045.3271 22H2, x64]
2023-08-02 17:13:12 - Checking for required build files
2023-08-02 17:13:12 - Initialization complete
2023-08-02 17:13:21 - WIM details (Installed WinRE): \\?\Volume{361a644c-20f3-11e7-8da5-baccec9993dd}\Recovery\WindowsRE\Winre.wim
2023-08-02 17:13:21 - | WinRE [WIM], Architecture: x64, Version: 10.0.19041, Service Pack: build 1, level 0
2023-08-02 17:13:42 - Verifying build requirements (TBWinPE)
2023-08-02 17:13:42 - Image for Windows 3.61a found: C:\Program Files (x86)\TeraByte Drive Image Backup and Restore Suite
2023-08-02 17:13:42 - TBIView 4.60 found: C:\Program Files (x86)\TeraByte Drive Image Backup and Restore Suite\TBIView
2023-08-02 17:13:42 - TBIMount 1.25c found: C:\Program Files (x86)\TeraByte Drive Image Backup and Restore Suite\TBIView
2023-08-02 17:13:42 - TBOSDT 2.19 found (Professional for BootIt version): C:\Program Files (x86)\TeraByte Drive Image Backup and Restore Suite\TeraByte OSD Tool Suite Pro
2023-08-02 17:13:42 - | Warning: BootIt license key not found or appears invalid. Without a valid key, TBOSDT will run in Professional mode.
2023-08-02 17:13:42 - Build source: Windows 11 ADK (10.0.22621)
2023-08-02 17:13:43 - Verification complete
2023-08-02 17:13:47 - Creating TBWinPE build (Architecture: AMD64)
2023-08-02 17:13:47 - Build ID: {75C26286-C945-41A2-A7EE-E8C897914A90}
2023-08-02 17:13:47 - Build path: C:\Program Files (x86)\TeraByte Drive Image Backup and Restore Suite\tbwinre
2023-08-02 17:13:47 - Initializing DISM (1,0)
2023-08-02 17:13:47 - DISM initialized (A)
2023-08-02 17:13:48 - Copying WinPE files
2023-08-02 17:13:49 - Mounting WinPE image
2023-08-02 17:13:59 - WinPE image file architecture: x64 [10.0.22621.1]
2023-08-02 17:14:00 - Configuring WinPE
2023-08-02 17:14:00 - Info: DEFAULT hive loaded manually (0x2) (0x0)
2023-08-02 17:14:00 - Info: SYSTEM hive loaded manually (0x2) (0x0)
2023-08-02 17:14:01 - Adding TBLauncher [1.32]
2023-08-02 17:14:01 - Adding Image for Windows [3.61a]
2023-08-02 17:14:02 - Adding TBIView [4.60]
2023-08-02 17:14:02 - Adding TBIMount [1.25c]
2023-08-02 17:14:03 - Adding TeraByte OSD Tool Suite (Pro for BootIt) [2.19]
2023-08-02 17:14:03 - | BootIt license key not found
2023-08-02 17:14:03 - Finalizing build
2023-08-02 17:14:04 - Saving WinPE image
2023-08-02 17:14:18 - Unmounting WinPE image
2023-08-02 17:14:38 - Build process completed successfully
2023-08-02 17:14:40 - Program exiting with code 0

[Fracso]

Problem solved with the new ADK for Windows 11 22H2 modified in September 2023.

Now, an IFW WinPE built with this ADK boots in a computer in which the revocations have been applied, with Secure Boot enabled.