where does win 7 store slic xrm-ms certificates?

Discussion in 'Windows 7' started by jeff69dini, May 15, 2019.

  1. jeff69dini

    jeff69dini MDL Expert

    Nov 22, 2008
    1,017
    234
    60
    I installed the wrong one, didn't know if I had to delete that one before I installed the correct slic one, and could not find it in any search :|
     
  2. coleoptere2007

    coleoptere2007 MDL Guru

    Apr 8, 2008
    3,311
    1,938
    120
    use the correct one or try the loader from daz :)
     
  3. Enthousiast

    Enthousiast MDL Tester

    Oct 30, 2009
    47,262
    94,710
    450
    #5 Enthousiast, May 15, 2019
    Last edited: May 15, 2019
    If the system has a valid slic, the loader would have worked on uefi, how are you now using the cert? it needs the slic and oem:slp, doesn't it?
     
  4. jeff69dini

    jeff69dini MDL Expert

    Nov 22, 2008
    1,017
    234
    60
    Q. The loaders status says "Unsupported partition table", why is this?
    A. You're either using GPT on a UEFI motherboard or you've got a locked OEM partition. Both problems can be fixed by fully formatting your entire hard drive.

    but that wasn't an option so I did it manually :p
     
  5. Enthousiast

    Enthousiast MDL Tester

    Oct 30, 2009
    47,262
    94,710
    450
    The loader does 2 things:

    When it finds a valid slic (UEFI/GPT or Legacy BIOS/MBR), it only applies the certificate and oem:slp key

    When it doesn't find a valid slic, it installs the boot loader and next it applies the certificate and oem:slp key

    The boot loader only installs when needed, but only on MBR partitioned systems.
     
  6. Yen

    Yen Admin
    Staff Member

    May 6, 2007
    13,081
    13,979
    340
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  7. urie

    urie Moderator
    Staff Member

    May 21, 2007
    9,039
    3,388
    300
    Yes correct Yen, I remember way back some scripts would add all certificates that were in $OEM$\$$\SYSTEM32\OEM folder.
     
  8. Enthousiast

    Enthousiast MDL Tester

    Oct 30, 2009
    47,262
    94,710
    450
    But how is the slic added, because when it was valid, the loader would have worked.
     
  9. urie

    urie Moderator
    Staff Member

    May 21, 2007
    9,039
    3,388
    300
    #11 urie, May 15, 2019
    Last edited: May 15, 2019
    The Loader checks manufacturer info from motherboard and adds appropriate certificate.

    Edit: from what I can make out he added certificate manually example
    slmgr.vbs ilc c:\your_certificate.xrm-ms
     
  10. Enthousiast

    Enthousiast MDL Tester

    Oct 30, 2009
    47,262
    94,710
    450
    Yes, but:

    suggests there is no valid slic, else it would have worked, even on UEFI installs.
     
  11. urie

    urie Moderator
    Staff Member

    May 21, 2007
    9,039
    3,388
    300
  12. Yen

    Yen Admin
    Staff Member

    May 6, 2007
    13,081
    13,979
    340
    The loader status doesn't 'say' this if you are on GPT and the UEFI has a valid SLIC integrated.
    The loader then does not install, but applies the needed slmgr commands to establish the right certificate and corresponding OA key.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...