@garlin
Hello,
I have an old Lenovo M700 Tiny with latest BIOS from 2022 with no KEK CA 2023 inside.
I downloaded the zip file and executed the Update_UEFI-CA2023.ps1 -Revoke as script suggested and after downloading all the certs and keys I did a restart.
I was in Setup mode and Secure Boot...