Table of contents
TLS
TOC
Collapse the table of content
Expand the table of content

Get-SecureBootPolicy

Brian Lich|Last Updated: 4/3/2017

SYNOPSIS

Gets the publisher GUID and the policy version of the Secure Boot configuration policy.

SYNTAX

Get-SecureBootPolicy [<CommonParameters>]

DESCRIPTION

The Get-SecureBootPolicy cmdlet gets the publisher GUID and the policy version of the Secure Boot configuration policy.

The cmdlet runs on both UEFI and BIOS (non-UEFI) computers.

If the computer does not support Secure Boot or is a non-UEFI computer, this cmdlet displays the following:

Secure Boot policy is not enabled on this machine.

If you do not run Windows PowerShell® in administrator mode, this cmdlet returns an error displaying the following:

Incorrect authentication data.

EXAMPLES

Example 1: Get Secure Boot policy

PS C:\> Get-SecureBootPolicy | Format-List
Publisher: 77fa9abd-0359-4d32-bd60-28f4e78f784b 
Version  : 1

This command gets the publisher GUID and the policy version of the Secure Boot configuration policy.

PARAMETERS

CommonParameters

This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.

INPUTS

None

OUTPUTS

Microsoft.SecureBoot.Commands.SecureBootPolicy

This cmdlet returns a SecureBootPolicy object that contains the following information about the Secure Boot policy for the computer:

  • A GUID named Publisher.
  • An unsigned 32-bit integer named Version.

NOTES

Confirm-SecureBootUEFI

Format-SecureBootUEFI

Get-SecureBootUEFI

Set-SecureBootUEFI

© 2017 Microsoft