Get-SecureBootPolicy

Get-SecureBootPolicy

Gets the publisher GUID and the policy version of the Secure Boot configuration policy.

Syntax

Get-SecureBootPolicy [ <CommonParameters>]

Detailed Description

The Get-SecureBootPolicy cmdlet gets the publisher GUID and the policy version of the Secure Boot configuration policy.

The cmdlet will run on both UEFI and BIOS (non-UEFI) computers.

If the computer does not support Secure Boot or is a non-UEFI computer, then this cmdlet returns an error displaying the following: Secure Boot policy is not enabled on this machine.

If Windows PowerShell® is not run in administrator mode, then this cmdlet returns an error displaying the following: Incorrect authentication data.

Parameters

<CommonParameters>

This cmdlet supports the common parameters: -Verbose, -Debug, -ErrorAction, -ErrorVariable, -OutBuffer, and -OutVariable. For more information, see    about_CommonParameters (https://go.microsoft.com/fwlink/p/?LinkID=113216).

Inputs

The input type is the type of the objects that you can pipe to the cmdlet.

  • None

Outputs

The output type is the type of the objects that the cmdlet emits.

  • Microsoft.SecureBoot.Commands.SecureBootPolicy

    The SecureBootPolicy object contains information about the Secure Boot policy in place for the computer.
    Contains the following fields:
    -- A GUID named publisher.
    -- An unsigned 32-bit integer named version.

Examples

EXAMPLE 1

This example gets the publisher GUID and the policy version of the Secure Boot configuration policy.

PS C:\> Get-SecureBootPolicy | Format-List

Confirm-SecureBootUEFI

Format-SecureBootUEFI

Get-SecureBootUEFI

Set-SecureBootUEFI