ebay being blocked

[loxocemus]

Hi, I have an issue with Ebay being blocked for me most of the time, occasionally it works for a few days and then its blocked again, I can only access it via a vpn, this is the error

"Access Denied

You don't have permission to access "http://www.ebay.co.uk/myb/WatchList?" on this server.

Reference #18.1e3f655f.1774491197.fd2b810

https://errors.edgesuite.net/18.1e3f655f.1774491197.fd2b810"

its the same regardless of browser or deletion of cookies etc. Does anyone have a solution?

P.S in HomeSafe settings i have scam and virus enabled but no other protection (other than win11 firewall/antiV)

Thank you and Rgds

Edward

[loxocemus]

Sideways mate, that the key 😊

[KeithFrench]

Thanks, but be careful, I still need to get my head through a door frame!

[loxocemus]

i saved ur linux advice in a txt file called "linux in virtual machines recommended by talktalk superdude keith.txt" 😁

rgds

ed

[KeithFrench]

For as near a Windows look'n'feel (not one that was an outright copy a few months back), go for:-

ZorinOS

Then, the all-time favourite is Linux Mint.

[loxocemus]

i have used virtual machines a couple times before, i might try a couple of those beginner level linux distro's in a VM see how i like them, of course its your fave software compliance between win and linux that's always the fly in the linux ointment isn't it. But linux has a lot of nice alternatives now, the command line system was always the learning curve for me.

rgds

ed.

[KeithFrench]

Hi @loxocemus 

Thanks for your comments. I do have two different distros of Linux running in Virtual Machines via Oracle's VirtualBox:-

https://www.virtualbox.org/ 

It is excellent & far safer than dual booting, which can be a real pain sometimes if something messes with it!

[loxocemus]

Dell-SupportAssist-OS-Recovery-Plugin-for-Dell-Update_PM7VC_WIN64_5.5.15.2_A00

Dell-Connected-Service-Delivery-Application_58HT5_WIN64_1.1.1_A00

there was also a few minor win updates but I'm sure i checked secureboot after them and it still showed the old certificates, when the pc did have the green screen heart attack, it removed 25H2, i assume dell protection blamed that for the crash, i have reinstalled it but it didn't fix the old certificates either.

if i was as smart as you keith id switch to linux in a heartbeat or at least dualboot to compare the experiences.

rgds

edward

[KeithFrench]

Sounds good to me. Do you know which drivers you updated?

[loxocemus]

Hey Keith after a bit of tinkering and some messing with dell drivers i have arrived at this (see pic), the firmware protection is still greyed out/admin rights but i am giving up on that, its just too much hassle.

ps dell drivers are probably the most hit and miss i have used, lenovo are much better from my own experience

rgds

edward

[KeithFrench]

Hi Edward,

I would still like to know the resolution to your secure boot problem, though. With my issue of:-

Invalid Signature Detected. Check Secure Boot policy in setup

The main problem here was that the Secure Boot options were all greyed out, with the setting at the top of the Secure Boot page in the UEFI stating:-

System Mode Deployed

The way that sorted it was to disconnect all drives (M.2, SSD & HHD) & boot into the UEFI, at which point I also updated the BIOS. Then go into the secure boot settings & go through the normal process of:-

• Boot > Secure boot (enabled by default)
• Set Secure Boot to Disabled
• Save & exit
• Set Secure Boot Mode to Custom.
• Restore factory keys set to Yes.
• Set Secure Boot back to Enabled.
• Save & Exit

[loxocemus]

Hi Keith, like you say this is unrelated to talktalk, but i do appreciate your help and insights.

rgds

edward

[KeithFrench]

Hi @loxocemus 

Another thought. Is your motherboard running the latest, non beta, UEFI update (BIOS Update). If not, do later releases mention anything about this problem? As far as actually doing a BIOS update, I have no idea of your skill levels, so you do that totally at your own risk.

[KeithFrench]

Hi @loxocemus 

Sorrry but this is getting totally beyond a TalkTalk issue.

From what I have read, getting True from that PowerShell cmdlet, you should be good to go, but there is more to it. Your image is showing that you are using an older boot trust configuration that needs to be updated. I am no expert on this, but I have spent some time trying to find out for you. This MS site:-

https://support.microsoft.com/en-us/topic/secure-boot-certificate-update-status-in-the-windows-secur... 

Says:-

A green icon means that your device is sufficiently protected and there aren’t any recommended actions.

If this is a laptop or a pre-built, I would consult the support team of the manufacturer/system builder from whom you got it. If you built it yourself, I would go to the motherboard manufacturer's support team for guidance.

[loxocemus]

hey keith, i have this, see pic, which i assume means i haven't got the latest rollout from win update yet, but i get this from powershell saying i do have the latest certificates ?

"S C:\WINDOWS\system32> ([System.Text.Encoding]::ASCII.GetString((Get-SecureBootUEFI db).bytes) -match 'Windows UEFI CA 2023')
True"

rgds edward

[ferguson]

Sorry to chip in, but ah, Microsoft Windows: the gift that keeps on giving! 😉

[KeithFrench]

No, that's not what I had  it sounds like the update has not been applied. In Windows Updates History, under other, do you have this update:-

Secure Boot Allowed Key Exchange Key (KEK) Update

Now go into Windows Security > Device Security

In the Secure Boot section, there should be a small green tick on the power button icon:-

Secure Boot

[loxocemus]

hey keith could u tell me ur resolution u mentioned above, my pc just crashed and the error log says this

Log Name: System
Source: Microsoft-Windows-TPM-WMI
Date: 08/04/2026 15:27:24
Event ID: 1801
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: AURORA
Description:
Updated Secure Boot certificates are available on this device but have not yet been applied to the firmware. Review the published guidance to complete the update and maintain full protection. This device signature information is included here.
DeviceAttributes: BaseBoardManufacturer:Alienware;FirmwareManufacturer:Alienware;FirmwareVersion:2.1.2;OEMModelNumber:Alienware 16X Aurora AC16251;OEMModelBaseBoard:06W9VX;OEMModelSystemFamily:Alienware;OEMManufacturerName:Alienware;OEMModelSKU:0D34;OSArchitecture:amd64;
BucketId: 04c3c4d37e8c235a1f7e46f63e3567427855e3cdf0232a2fdb06b0573da1869b
BucketConfidenceLevel: Under Observation - More Data Needed
UpdateType:
For more information, please see https://go.microsoft.com/fwlink/?linkid=2301018.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-TPM-WMI" Guid="{7d5387b0-cbe0-11da-a94d-0800200c9a66}" />
<EventID>1801</EventID>
<Version>2</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2026-04-08T14:27:24.8582533Z" />
<EventRecordID>43338</EventRecordID>
<Correlation />
<Execution ProcessID="32280" ThreadID="20744" />
<Channel>System</Channel>
<Computer>AURORA</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="DeviceAttributes">BaseBoardManufacturer:Alienware;FirmwareManufacturer:Alienware;FirmwareVersion:2.1.2;OEMModelNumber:Alienware 16X Aurora AC16251;OEMModelBaseBoard:06W9VX;OEMModelSystemFamily:Alienware;OEMManufacturerName:Alienware;OEMModelSKU:0D34;OSArchitecture:amd64;</Data>
<Data Name="BucketId">04c3c4d37e8c235a1f7e46f63e3567427855e3cdf0232a2fdb06b0573da1869b</Data>
<Data Name="BucketConfidenceLevel">Under Observation - More Data Needed</Data>
<Data Name="UpdateType">
</Data>
</EventData>
</Event>

was this your problem?

[KeithFrench]

I had a recent issue on my PC after the update to renew the secure boot certificates. The UEFI refused to boot to any disk, including my main C drive & recovery disks, with the error:-

"Invalid Signature Detected. Check Secure Boot policy in setup"

I won't bore you with the resolution unless you come across a similar problem.

[loxocemus]

Hi Keith it did clear keys/hello like you said but that was an easy fix, but that actual firmware protection greyed out/managed by admin error has been impossible to sort and i tried literally everything, u know all the bios settings, virtualisation, uefi, secureboot hypervisor, deviceguard settings, gpedit regedit stuff but it stubbornly refuses to enable, so i am just going to do without it, i am tired of restarting the pc 50 times to no avail.

But ebay is still working so thats good.

rgds

edward

[KeithFrench]

Hi @loxocemus 

You are very welcome.

Be careful, having cleared your TPM though, you may have inadvertently wiped any passkeys or Windows Hello that are stored there & they might need recreating. Core Isolation is very much driver-dependent for it to work.