Use PowerShell to get Secure Boot UEFI variable values

by Mitch Tulloch [Published on 24 July 2014 / Last Updated on 24 July 2014]

Learn how to use Windows PowerShell to get Secure Boot UEFI variable values

Here's another tip from my colleague Ed Wilson (the Microsoft Scripting Guy) about how to use PowerShell to

Question: You want to find UEFI variable values related to secure boot such as the following: SetupMode, SecureBoot, KEK, PK, SignatureDatbase and forbidden SignatureDatabase. How can you do this using Windows PowerShell?

Answer: Open the Windows PowerShell console with administrator access, and use the Get-SecureBootUEFI cmdlet and specify the appropriate variable name. The following illustrates this technique:

Get-SecureBootUEFI -Name setupmode

Mitch Tulloch is a nine-time recipient of the Microsoft Most Valuable Professional (MVP) award and a widely recognized expert on Windows administration, deployment and virtualization.  For more information see

Ed Wilson is the bestselling author of eight books about Windows Scripting, including Windows PowerShell 3.0 Step by Step, and Windows PowerShell 3.0 First Steps. He writes a daily blog about Windows PowerShell call Hey, Scripting Guy! that is hosted on the Microsoft TechNet Script Center; for more PowerTips check out the Hey, Scripting Guy! blog.

See Also

The Author — Mitch Tulloch

Mitch Tulloch is a well-known expert on Windows Server administration and cloud computing technologies. He has published over a thousand articles on information technology topics and has written, contributed to or been series editor for over 50 books.

Featured Links