cws6206/secureboot-inspector

SecureBoot Inspector is a small Windows 11 utility that checks whether your computer's Secure Boot feature is properly configured. Secure Boot is a security standard built into modern computers that prevents unauthorized software from loading when your machine starts up. This tool reads the relevant settings directly from your PC's firmware and reports what it finds in plain text. The app checks your firmware type and whether Secure Boot is currently active. It also reads the four main signature databases that Secure Boot relies on: the Platform Key, the Key Exchange Key, the allowed signatures list, and the forbidden signatures list. For each certificate it finds, it shows the certificate's name, who issued it, when it expires, and a unique fingerprint called a thumbprint. It also displays any SHA-256 hash entries stored in those databases. When the inspection is done, you can copy the results to your clipboard or save them as a text report. The app is distributed as a portable folder rather than a single self-contained file, because some Windows systems reject single-file executables with a loader error. To use it, right-click the executable and choose "Run as administrator." Administrator privileges are required because reading these firmware variables is a protected operation on Windows. No installation is needed. The source description is in German, but the tool itself and its README are written in English. It is released under the GNU General Public License version 3 or later.