Microsoft has recently begun replacing expiring Secure Boot certificates on eligible Windows 11 systems running 24H2 and 25H2 ...
Microsoft is rolling out "Secure Boot Allowed Key Exchange Key (KEK) Update," which requires a system reboot to finish ...
The Key Exchange Key (KEK) acts as an authority that allows Microsoft to update the other databases, like the DB and DBX that ...
Microsoft confirms systems without updated Secure Boot certificates will boot normally but lose some security protections.
XDA Developers on MSN
Microsoft's Secure Boot certificates expire in June 2026, but older PCs may never get the fix
Make sure you've updated before the deadline.
Event ID 1034: The cause of this informative event being logged is a confirmation that the Secure Boot DBX database has been updated successfully. Modifying or updating the untrusted Secure Boot ...
So... my Asus mobo (ROG Strix Z390-E Gaming) is from 2018, and while the code Andrew provided for PowerShell shows I'm OK for the new cert, I get "False" for Default ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results