where does win 7 store slic xrm-ms certificates?

Discussion in 'Windows 7' started by jeff69dini, May 15, 2019.

  1. jeff69dini

    jeff69dini MDL Addicted

    Nov 22, 2008
    831
    188
    30
    I installed the wrong one, didn't know if I had to delete that one before I installed the correct slic one, and could not find it in any search :|
     
  2. coleoptere2007

    coleoptere2007 MDL Guru

    Apr 8, 2008
    2,688
    1,391
    90
    use the correct one or try the loader from daz :)
     
  3. Enthousiast

    Enthousiast MDL Tester

    Oct 30, 2009
    23,878
    33,575
    390
    #5 Enthousiast, May 15, 2019
    Last edited: May 15, 2019
    If the system has a valid slic, the loader would have worked on uefi, how are you now using the cert? it needs the slic and oem:slp, doesn't it?
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  4. jeff69dini

    jeff69dini MDL Addicted

    Nov 22, 2008
    831
    188
    30
    Q. The loaders status says "Unsupported partition table", why is this?
    A. You're either using GPT on a UEFI motherboard or you've got a locked OEM partition. Both problems can be fixed by fully formatting your entire hard drive.

    but that wasn't an option so I did it manually :p
     
  5. Enthousiast

    Enthousiast MDL Tester

    Oct 30, 2009
    23,878
    33,575
    390
    The loader does 2 things:

    When it finds a valid slic (UEFI/GPT or Legacy BIOS/MBR), it only applies the certificate and oem:slp key

    When it doesn't find a valid slic, it installs the boot loader and next it applies the certificate and oem:slp key

    The boot loader only installs when needed, but only on MBR partitioned systems.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  6. Yen

    Yen Admin
    Staff Member

    May 6, 2007
    11,760
    11,919
    340
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  7. urie

    urie Moderator
    Staff Member

    May 21, 2007
    8,977
    3,297
    300
    Yes correct Yen, I remember way back some scripts would add all certificates that were in $OEM$\$$\SYSTEM32\OEM folder.
     
  8. Enthousiast

    Enthousiast MDL Tester

    Oct 30, 2009
    23,878
    33,575
    390
    But how is the slic added, because when it was valid, the loader would have worked.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  9. urie

    urie Moderator
    Staff Member

    May 21, 2007
    8,977
    3,297
    300
    #11 urie, May 15, 2019
    Last edited: May 15, 2019
    The Loader checks manufacturer info from motherboard and adds appropriate certificate.

    Edit: from what I can make out he added certificate manually example
    slmgr.vbs ilc c:\your_certificate.xrm-ms
     
  10. Enthousiast

    Enthousiast MDL Tester

    Oct 30, 2009
    23,878
    33,575
    390
    Yes, but:

    suggests there is no valid slic, else it would have worked, even on UEFI installs.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  11. urie

    urie Moderator
    Staff Member

    May 21, 2007
    8,977
    3,297
    300
  12. Yen

    Yen Admin
    Staff Member

    May 6, 2007
    11,760
    11,919
    340
    The loader status doesn't 'say' this if you are on GPT and the UEFI has a valid SLIC integrated.
    The loader then does not install, but applies the needed slmgr commands to establish the right certificate and corresponding OA key.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...