Use PowerShell to get Secure Boot UEFI variable values

by Mitch Tulloch [Published on 24 July 2014 / Last Updated on 24 July 2014]

Learn how to use Windows PowerShell to get Secure Boot UEFI variable values

Here's another tip from my colleague Ed Wilson (the Microsoft Scripting Guy) about how to use PowerShell to

Question: You want to find UEFI variable values related to secure boot such as the following: SetupMode, SecureBoot, KEK, PK, SignatureDatbase and forbidden SignatureDatabase. How can you do this using Windows PowerShell?

Answer: Open the Windows PowerShell console with administrator access, and use the Get-SecureBootUEFI cmdlet and specify the appropriate variable name. The following illustrates this technique:

Get-SecureBootUEFI -Name setupmode

Mitch Tulloch is a nine-time recipient of the Microsoft Most Valuable Professional (MVP) award and a widely recognized expert on Windows administration, deployment and virtualization.  For more information see

Ed Wilson is the bestselling author of eight books about Windows Scripting, including Windows PowerShell 3.0 Step by Step, and Windows PowerShell 3.0 First Steps. He writes a daily blog about Windows PowerShell call Hey, Scripting Guy! that is hosted on the Microsoft TechNet Script Center; for more PowerTips check out the Hey, Scripting Guy! blog.

The Author — Mitch Tulloch

Mitch Tulloch is a widely recognized expert on Windows administration, networking, and security. He has been repeatedly awarded Most Valuable Professional (MVP) status by Microsoft for his outstanding contributions in supporting users who deploy and use Microsoft platforms, products and solutions. Mitch has published over two hundred articles on different IT websites and magazines, and he has written or contributed to almost two dozen books and is lead author for the Windows 7 Resource Kit from Microsoft Press. For more information, see .

Latest Contributions

Featured Links