Microsoft now offers several Key-Encryption-Key (KEK) update binaries signed by each known Platform Key (PK) in its secureboot_objects GitHub repository. In fact, there is a combined KEK update binary located in C:\Windows\System32\SecureBootUpdates named KEKUpdateCombined.bin (although I don't...