Get-SecureBootPolicy

Gets the publisher GUID and the policy version of the Secure Boot configuration policy.

Syntax

Get-SecureBootPolicy []

Description

The Get-SecureBootPolicy cmdlet gets the publisher GUID and the policy version of the Secure Boot configuration policy.

The cmdlet runs on both UEFI and BIOS (non-UEFI) computers.

If the computer does not support Secure Boot or is a non-UEFI computer, this cmdlet displays the following:

Secure Boot policy is not enabled on this machine.

If you do not run Windows PowerShell® in administrator mode, this cmdlet returns an error displaying the following:

Incorrect authentication data.

Examples

Example 1: Get Secure Boot policy

PS C:\> Get-SecureBootPolicy | Format-List
Publisher: 77fa9abd-0359-4d32-bd60-28f4e78f784b
Version  : 1

This command gets the publisher GUID and the policy version of the Secure Boot configuration policy.

Inputs

None

Outputs

Microsoft.SecureBoot.Commands.SecureBootPolicy

This cmdlet returns a SecureBootPolicy object that contains the following information about the Secure Boot policy for the computer:

  • A GUID named Publisher.
  • An unsigned 32-bit integer named Version.