I am trying to do these two steps as a BAT file but open to other ideas. The BootHole fix involves doing this.
First step is to run this, and it take a few seconds to execute:
SplitDbxContent.ps1 dbxupdate_x64.bin
Second step is to do this:
Set-SecureBootUefi -Name dbx -ContentFilePath .\content.bin -SignedFilePath .\signature.p7 -Time 2010-03-06T19:17:21Z -AppendWrite
I want to put it in PDQ deploy, so I can use a BAT file if I copy the files to target first. Or I can use Powershell directly, but that is not working.
Any help appreciated!