/build/static/layout/Breadcrumb_cap_w.png

eDellroot Certificate uninstall using k1000

I'm sure most of you have heard about the eDellroot Certificate issue that is going around.

I was wondering if any of you have a fix to search for the cert and uninstall it if it is present on a machine?

Also, do you think that the dell update portion of the k1000 can solve this issue?  We do not use this on our machines but I could enable it just to get this Certificate removed if that will work.

Thanks,

0 Comments   [ + ] Show comments

Answers (3)

Posted by: rileyz 9 years ago
Red Belt
0
Im sure if you can do via GPO... Or via PKI - must be able to it via PKI?

I don't know, it has been a long time since I have done that sort of thing, someone else here might be able to help.





If not, you can try plan B and butcher my code to remove the cert.

$Shell = New-Object System.Security.Cryptography.X509Certificates.X509Certificate
$Shell.Import("$Certificate")
$CertificateSerialNumber = $Shell.GetSerialNumberString()
&Certutil.exe -delstore “TrustedPublisher” "$CertificateSerialNumber" | Out-Null

Its from here

As part of the driver removal, it also removes the cert (if it was required when injecting), points you in the right direction scripting wise anyways.




**Update
http://www.thewindowsclub.com/edellroot-certificate-removal-instructions

There's a tool you can download, near the bottom. The executable is signed by Dell, so it's safe.

lul, could be signed by the dodgy cert though! 
I checked, it's OK.


Posted by: jknox 9 years ago
Red Belt
0
Here's the "official" removal guide with an executable file.  You should be able to automate this: https://dellupdater.dell.com/Downloads/APP009/eDellRootCertificateRemovalInstructions.pdf
Posted by: Shyamji 9 years ago
White Belt
0
This is now more easy because Microsoft has released Security Update to remove eDellroot Certificate. So just install update and it's done. 

Don't be a Stranger!

Sign up today to participate, stay informed, earn points and establish a reputation for yourself!

Sign up! or login

Share

 
This website uses cookies. By continuing to use this site and/or clicking the "Accept" button you are providing consent Quest Software and its affiliates do NOT sell the Personal Data you provide to us either when you register on our websites or when you do business with us. For more information about our Privacy Policy and our data protection efforts, please visit GDPR-HQ