Windows 2023 UEFI Certificate Authority Firmware Update Nudge (FUN) Utility

The UEFI FUN Utility attached will help drive Windows forward in making changes to the system firmware including certificate databases.

It will also log actions and the current state of the system.

Switches:

• -Report Only
  • Log system details in the Windows Application Log
• -Silent
  • No console window.
  • Log system details and actions in the Windows Application Log
• -Verbose
  • Log additional system details in the Windows Application Log

This utility has been tested on:

• Windows 11 25H2
• Windows Server 2022
• Windows Server 2025

Actions

Depending on the system state the utility may:

• Set the registry value of HKLM:\SYSTEM\CurrentControlSet\Control\SecureBoot > AvailableUpdates to 0x5944
• Run the scheduled task \Microsoft\Windows\PI\Secure-Boot-Update. This scheduled task usuall runs every 12 hours by default

Most systems will need 1-3 reboots to completely finish the update process. FUN will not reboot the system.

Pre-Requisites

• Windows has the May 2025 cumulative updates installed or later
• UEFI boot is enabled without CSM (FUN checks for this and reports back
• Secureboot is Enabled (FUN checks for this and reports back)
• FUN needs to be run with Administrative rights

Event Log Outputs

Applies to:

• All products running Microsoft Windows