Geoff Chappell, Software Analyst
The SYSTEM_SECUREBOOT_INFORMATION structure is what a successful call to ZwQuerySystemInformation or NtQuerySystemInformation produces in its output buffer when given the information class SystemSecureBootInformation (0x91).
The SYSTEM_SECUREBOOT_INFORMATION structure is not documented.
The SYSTEM_SECUREBOOT_INFORMATION is 0x02 bytes in both 32-bit and 64-bit Windows.
Offset | Definition |
---|---|
0x00 |
BOOLEAN SecureBootEnabled; |
0x01 |
BOOLEAN SecureBootCapable; |
The function fills the structure with information that the kernel learns from the loader via the BootApplicationPersistentData in the LOADER_PARAMETER_EXTENSION.