Forum Discussion

jimbeam128's avatar
jimbeam128
Copper Contributor
Jun 03, 2026

WDS: PXE-Boot a client with CA2023 certificate and CA2011 revoked

Hi Microsoft, we try to PXE-Boot Notebooks that have SecureBoot enabled and have the CA2023 certificates. Furthermore the Clients have CA2011 Certificates revoked. Our Environment / Setup: WDS-Ser...
CA 2023
PXE
wds
AndyDiet's avatar
AndyDiet
Copper Contributor
Jun 11, 2026

think you have to exchange the files you are sending out from your DHCP

for x64 boot\x64\wdsmgfw.efi
for arm boot\arm64\wdsmgfw.efi

the PXE boot files are e.g. on a windows 11 boot iso you can download from Microsoft as a recovery media

en-us_windows_11_business_editions_version_25h2_x64_dvd_41c521e7.iso\sources\boot.wim\1\Windows\Boot\






jimbeam128's avatar
jimbeam128
Copper Contributor
Jul 28, 2026

Hi all,

I could solve the issue on our site. We´ve got different VLANs (networks) where the WDS and the clients reside. I brought a test-client to the same network as the WDS, then it worked.

Problem was that we had only an IP-Helper entry in our switch config for the DHCP-Server (which is a different server). After we added an additional IP-Helper entry for our WDS-Server PXE-booting with new EFI-Files works like a charm!