This is the built-in help made by Microsoft for the command 'Get-SecureBootUEFI', in PowerShell version 5 - as retrieved from
Windows version 'Microsoft Windows Server 2012 R2 Standard' PowerShell help files on 2016-06-23.
For PowerShell version 3 and up, where you have Update-Help, this command was run just before creating the web pages from the help files.
Gets the UEFI variable values related to Secure Boot such as the SetupMode, SecureBoot, KEK, PK, SignatureDatabase, and forbidden SignatureDatabase.
Get-SecureBootUEFI [-Name] <String> [-OutputFilePath <String>] [<CommonParameters>]
The Get-SecureBootUEFI cmdlet gets the UEFI variable values related to Secure Boot which are: SetupMode, SecureBoot, KEK, PK, SignatureDatabase (DB), and forbidden
SignatureDatabase (DBX).
If the computer does not support Secure Boot or is a BIOS (non-UEFI) computer, then this cmdlet will return an error displaying the following: Cmdlet not supported on this
platform.
If the variable does not exist, then this cmdlet will return an error displaying the following: Variable is currently undefined.
If Windows PowerShell® is not run in administrator mode, then this cmdlet will return an error displaying the following: Unable to set proper privileges. Access was denied.
<
Online Version: http://go.microsoft.com/fwlink/p/?linkid=289486
Confirm-SecureBootUEFI
Format-SecureBootUEFI
Get-SecureBootPolicy
Set-SecureBootUEFI
<
EXAMPLE 1
PS C:\>Get-SecureBootUefi –Name PK | Format-List
Name : PK
Bytes : {161, 89, 192, 165...}
Attributes : NON VOLATILE
BOOTSERVICE ACCESS
RUNTIME ACCESS
TIME BASED AUTHENTICATED WRITE ACCESS
This example gets information about PK from the UEFI variable.