Did you manually update your Secure Boot Keys ?


OldNavy said:
This is way too complicated for millions upon millions of computer users.
Microsoft will have to come up with simple procedure for the implementation of this.
Click to expand...
I would agree that most should not attempt messing with this. For myself, though I've forgotten more than I ever knew about these cantankerous machines, I thought it pretty easy provided you follow the instructions here, starting down at Mitigation deployment guidelines. Then download the BootFile.ps1 script file provided at this site (Elevenforum) to check your work.
 

My Computers My Computers

System One System Two

  • At a glance

    Windows 11 Pro 25H2Core i7 10700K 3.8 GHzCorsair Vengeance LPX DDR4 128 GB 3000MHzAsus ProArt GeForce RTX 4070 Ti Super 16 GB
    OS
    Windows 11 Pro 25H2
    Computer type
    PC/Desktop
    Manufacturer/Model
    Wordsworth 10000
    CPU
    Core i7 10700K 3.8 GHz
    Motherboard
    Asus ROG Strix Z590-A Gaming Wifi
    Memory
    Corsair Vengeance LPX DDR4 128 GB 3000MHz
    Graphics Card(s)
    Asus ProArt GeForce RTX 4070 Ti Super 16 GB
    Sound Card
    Asus Xonar DSX
    Monitor(s) Displays
    HP 2709m
    Screen Resolution
    1920x1080
    Hard Drives
    Samsung 990 Pro M.2 SSD 2 TB; Samsung 990 Pro M.2 SSD 4 TB
    PSU
    Thermaltake Toughpower GF3 1350W
    Case
    Fractal Design Meshify 2
    Cooling
    CPU-Noctua NH D15 Chromax, GPU-Stock, Case-Noctua Chromax 3x140
    Keyboard
    Microsoft Natural Ergo 4000
    Mouse
    HP X500
    Internet Speed
    Cable
    Browser
    Vivaldi, MS Edge
    Antivirus
    Malwarebytes 5.2.4, Windows Defender
    Other Info
    Klipsch Promedia 5.1 THX
    Asus External Blu-Ray 16D1X-USB 3.0

  • At a glance

    Windows 11 Pro 25H2Core i7 6700K 4.0 GHzCorsair Vengeance LPX DDR4 32 GB 3000MHzAsus GeForce GTX 1050 Ti
    Operating System
    Windows 11 Pro 25H2
    Computer type
    PC/Desktop
    Manufacturer/Model
    Wordsworth 6000
    CPU
    Core i7 6700K 4.0 GHz
    Motherboard
    Asus Z170 Pro
    Memory
    Corsair Vengeance LPX DDR4 32 GB 3000MHz
    Graphics card(s)
    Asus GeForce GTX 1050 Ti
    Sound Card
    Asus Xonar SE
    Monitor(s) Displays
    HP X24ih
    Screen Resolution
    1920x1080
    Hard Drives
    Intel 760p M.2 SSD 500 GB; Intel 540 SSD 480 GB; Intel 335 SSD 240 GB
    PSU
    Thermaltake Toughpower GF1 750W
    Case
    Lian Li PC-B70
    Cooling
    CPU- Noctua NH-D15; GPU-Stock; Case-Noctua Chromax 2x140, 2x120
    Keyboard
    Microsoft Wireless Comfort 5050
    Mouse
    Microsoft Wireless Comfort 5050
    Internet Speed
    Cable
    Browser
    Vivaldi, MS Edge
    Antivirus
    Malwarebytes 4.4.3, Windows Defender
    Other Info
    HP bd 340
    HP bd 240
    Denon DRA-800H
    Klipsch RP-600M
    Klipsch R-100SW (2)

    System 3 Specs
    Windows 11 Pro 25H2
    Core i7 10700K 3.8 GHz
    Asus ROG Strix Z590-A Gaming Wifi
    Corsair Vengeance LPX DDR4 32 GB 3200MHz
    Asus Radeon RX560 Dual 4 GB
    Xonar SE
    Samsung 980 Pro M.2 SSD 1 TB (2)
    Thermaltake Toughpower GF3 850W
    Fractal Design Meshify 2
    CPU-Noctua NH D15 Chromax, GPU-Stock, Case-Noctua Chromax 2x140,1x120
Sheikh said:
is there any way to update keys offline? for example, a pack to install manually without internet connection.
Click to expand...
Yes. If your W10 22H2 or W11 image has been updated to the current CU's, then all the required files are there.

The problem about providing an automation script is it demands four reboots (which one MS enterprise-level doc claims can be narrowed to two reboots if you're brave). While adding the CA 2023 cert is harmless, it's revocation of CA 2011 without checking everything else is in place, is the hard part.

Unless you really, really, really trust the script's dev, it's not something you want to do completely automated.
 

My Computer My Computer

At a glance

Windows 7
OS
Windows 7
gunrunnerjohn said:
You're missing the 2023 certificate for booting other bootable utilities.

I have yet to ban the 2011 certificate on any of my machines.
Click to expand...
Don't know why I'd be missing that when I went through the same procedures for all three machines and the other two seem to have everything.
Boot EFI Update.webp
 

My Computers My Computers

System One System Two

  • At a glance

    Windows 11 Pro 25H2Core i7 10700K 3.8 GHzCorsair Vengeance LPX DDR4 128 GB 3000MHzAsus ProArt GeForce RTX 4070 Ti Super 16 GB
    OS
    Windows 11 Pro 25H2
    Computer type
    PC/Desktop
    Manufacturer/Model
    Wordsworth 10000
    CPU
    Core i7 10700K 3.8 GHz
    Motherboard
    Asus ROG Strix Z590-A Gaming Wifi
    Memory
    Corsair Vengeance LPX DDR4 128 GB 3000MHz
    Graphics Card(s)
    Asus ProArt GeForce RTX 4070 Ti Super 16 GB
    Sound Card
    Asus Xonar DSX
    Monitor(s) Displays
    HP 2709m
    Screen Resolution
    1920x1080
    Hard Drives
    Samsung 990 Pro M.2 SSD 2 TB; Samsung 990 Pro M.2 SSD 4 TB
    PSU
    Thermaltake Toughpower GF3 1350W
    Case
    Fractal Design Meshify 2
    Cooling
    CPU-Noctua NH D15 Chromax, GPU-Stock, Case-Noctua Chromax 3x140
    Keyboard
    Microsoft Natural Ergo 4000
    Mouse
    HP X500
    Internet Speed
    Cable
    Browser
    Vivaldi, MS Edge
    Antivirus
    Malwarebytes 5.2.4, Windows Defender
    Other Info
    Klipsch Promedia 5.1 THX
    Asus External Blu-Ray 16D1X-USB 3.0

  • At a glance

    Windows 11 Pro 25H2Core i7 6700K 4.0 GHzCorsair Vengeance LPX DDR4 32 GB 3000MHzAsus GeForce GTX 1050 Ti
    Operating System
    Windows 11 Pro 25H2
    Computer type
    PC/Desktop
    Manufacturer/Model
    Wordsworth 6000
    CPU
    Core i7 6700K 4.0 GHz
    Motherboard
    Asus Z170 Pro
    Memory
    Corsair Vengeance LPX DDR4 32 GB 3000MHz
    Graphics card(s)
    Asus GeForce GTX 1050 Ti
    Sound Card
    Asus Xonar SE
    Monitor(s) Displays
    HP X24ih
    Screen Resolution
    1920x1080
    Hard Drives
    Intel 760p M.2 SSD 500 GB; Intel 540 SSD 480 GB; Intel 335 SSD 240 GB
    PSU
    Thermaltake Toughpower GF1 750W
    Case
    Lian Li PC-B70
    Cooling
    CPU- Noctua NH-D15; GPU-Stock; Case-Noctua Chromax 2x140, 2x120
    Keyboard
    Microsoft Wireless Comfort 5050
    Mouse
    Microsoft Wireless Comfort 5050
    Internet Speed
    Cable
    Browser
    Vivaldi, MS Edge
    Antivirus
    Malwarebytes 4.4.3, Windows Defender
    Other Info
    HP bd 340
    HP bd 240
    Denon DRA-800H
    Klipsch RP-600M
    Klipsch R-100SW (2)

    System 3 Specs
    Windows 11 Pro 25H2
    Core i7 10700K 3.8 GHz
    Asus ROG Strix Z590-A Gaming Wifi
    Corsair Vengeance LPX DDR4 32 GB 3200MHz
    Asus Radeon RX560 Dual 4 GB
    Xonar SE
    Samsung 980 Pro M.2 SSD 1 TB (2)
    Thermaltake Toughpower GF3 850W
    Fractal Design Meshify 2
    CPU-Noctua NH D15 Chromax, GPU-Stock, Case-Noctua Chromax 2x140,1x120
wordsworth said:
Don't know why I'd be missing that when I went through the same procedures for all three machines and the other two seem to have everything.
Click to expand...
I've seen similar things when trying to upgrade my laptop, I'm also missing that certificate. I probably will never need it, but you never know.
 

My Computers My Computers

System One System Two Other systems

  • At a glance

    Win 11 Pro 25H2, Build 26200.8894Intel Core i5 1450064GB DDR4GeForce RTX 4060
    OS
    Win 11 Pro 25H2, Build 26200.8894
    Computer type
    PC/Desktop
    Manufacturer/Model
    Home Brew
    CPU
    Intel Core i5 14500
    Motherboard
    Gigabyte B760M G P WIFI
    Memory
    64GB DDR4
    Graphics Card(s)
    GeForce RTX 4060
    Sound Card
    Chipset Realtek
    Monitor(s) Displays
    LG 45" Ultragear, Acer 24" 1080p
    Screen Resolution
    5120x1440, 1920x1080
    Hard Drives
    Crucial P310 2TB 2280 PCIe Gen4 3D NAND NVMe M.2 SSD (O/S)
    Silicon Power 2TB US75 NVMe PCIe Gen4 M.2 2280 SSD (backup)
    Crucial BX500 2TB 3D NAND (2nd backup)
    Seagate 4TB Ironwolf, rotating HDD archive files
    External off-line backup Drives: 2 NVMe 4TB drives in external enclosures
    PSU
    Thermaltake Toughpower GF3 750W
    Case
    LIAN LI LANCOOL 216 E-ATX PC Case
    Cooling
    Lots of fans!
    Keyboard
    Microsoft Comfort Curve 2000
    Mouse
    Logitech G305
    Internet Speed
    Verizon FiOS 1GB
    Browser
    Firefox
    Antivirus
    Malware Bytes & Windows Defender Security

  • At a glance

    Win 11 Pro 25H2, Build 26200.8894Intel Core i5 1440032GB DDR5Intel 700 Embedded GPU
    Operating System
    Win 11 Pro 25H2, Build 26200.8894
    Computer type
    PC/Desktop
    Manufacturer/Model
    Home Brew
    CPU
    Intel Core i5 14400
    Motherboard
    Gigabyte B760M DS3H AX
    Memory
    32GB DDR5
    Graphics card(s)
    Intel 700 Embedded GPU
    Sound Card
    Realtek Embedded
    Monitor(s) Displays
    27" HP 1080p
    Screen Resolution
    1920x1080
    Hard Drives
    Crucial P310 2TB 2280 PCIe Gen4 eD NAND PCIe SSD
    Samsung EVO 990 2TB NVMe Gen4 SSD
    Samsung 2TB SATA SSD
    PSU
    Thermaltake Smart BM3 650W
    Case
    Okinos Micro ATX Case
    Cooling
    Fans
    Keyboard
    Microsoft Comfort Curve 2000
    Mouse
    Logitech G305
    Internet Speed
    Verizon FiOS 1GB
    Browser
    Firefox
    Antivirus
    Malware Bytes & Windows Defender Security
  • Nimo N171 17" Laptop, (Intel i3-1215U, 16GB RAM, 2TB NVMe, Win11 Pro)
    Acemagic Vista Mini PC V1 (Intel N150, 16GB RAM, 1TB NVMe, Win11 Pro)
    HP ENVY h8-1540t, (24GB RAM, 2TB SSD, 2TB HDD, Win11 Pro)
If you follow all the steps in Microsoft's instructions, then you should also enable SVN firmware.
Revoked CA 2011 + SVN = If you are doing a clean installation, all Windows 10 22H2 and 23H2 ISOs need to have SB disabled to install properly, otherwise there will be a security violation. Even if you download these older versions of Windows 10/11 from UUP and enable UpdtBootFiles in ConvertConfig.ini it will not help.
 

My Computer My Computer

At a glance

Windows 11, version 25H2 (26200)AMD Ryzen 9 9950X 16-Core ProcessorDDR5-6000 (CL36) 64.0 GBNVIDIA GeForce RTX 4090
OS
Windows 11, version 25H2 (26200)
Computer type
PC/Desktop
CPU
AMD Ryzen 9 9950X 16-Core Processor
Motherboard
ASRock B650M PG Riptide
Memory
DDR5-6000 (CL36) 64.0 GB
Graphics Card(s)
NVIDIA GeForce RTX 4090
PSU
1200W
Case
Phanteks Enthoo Pro 2
Cooling
Noctua NH-D12L

My Computers My Computers

System One System Two

  • At a glance

    Windows 11 Pro 25H2Ryzen 5 3500U8GBVega 8
    OS
    Windows 11 Pro 25H2
    Computer type
    Laptop
    Manufacturer/Model
    Huawei MateBook D15
    CPU
    Ryzen 5 3500U
    Memory
    8GB
    Graphics Card(s)
    Vega 8
    Screen Resolution
    FHD
    Hard Drives
    256GB Samsung SSD + 1TB HDD
    Browser
    Microsoft Edge
    Antivirus
    ESET Smart Security Premium

  • At a glance

    Windows 10 Enterprise LTSC 21H2intel core i7 6700HQ16GBNvidia Geforce GTX1060 (6GB)
    Operating System
    Windows 10 Enterprise LTSC 21H2
    Computer type
    Laptop
    Manufacturer/Model
    MSI GS73 6RF Stealth Pro
    CPU
    intel core i7 6700HQ
    Memory
    16GB
    Graphics card(s)
    Nvidia Geforce GTX1060 (6GB)
    Screen Resolution
    FHD
    Hard Drives
    128GB SSD + 1TB HDD
    Browser
    Microsoft Edge
    Antivirus
    Windows Defender
Sheikh said:
I have created a batch file to update those keys easily

github.com

GitHub - Sheikh98-DEV/Microsoft-Secure-Boot-Keys-Updater-Script: This script will install latest Secure Boot keys on your windows PC.

This script will install latest Secure Boot keys on your windows PC. - Sheikh98-DEV/Microsoft-Secure-Boot-Keys-Updater-Script
github.com github.com
Click to expand...

Some machines may be missing the Microsoft Corporation KEK 2K CA 2023 certificate, which is a newer certificate that replaced the Microsoft Corporation KEK CA 2011. I don't know how Microsoft will update this important KEK certificate. If the old KEK certificate expires, the user's machine will not be able to continue to update DB/DBX in the future.

My machine is missing the Microsoft Corporation KEK 2K CA 2023 certificate. I manually imported it using the Secure Boot option in the BIOS.
 

My Computer My Computer

At a glance

Windows 11, version 25H2 (26200)AMD Ryzen 9 9950X 16-Core ProcessorDDR5-6000 (CL36) 64.0 GBNVIDIA GeForce RTX 4090
OS
Windows 11, version 25H2 (26200)
Computer type
PC/Desktop
CPU
AMD Ryzen 9 9950X 16-Core Processor
Motherboard
ASRock B650M PG Riptide
Memory
DDR5-6000 (CL36) 64.0 GB
Graphics Card(s)
NVIDIA GeForce RTX 4090
PSU
1200W
Case
Phanteks Enthoo Pro 2
Cooling
Noctua NH-D12L
uncyler825 said:
Some machines may be missing the Microsoft Corporation KEK 2K CA 2023 certificate, which is a newer certificate that replaced the Microsoft Corporation UEFI CA 2011. I don't know how Microsoft will update this important KEK certificate. If the old KEK certificate expires, the user's machine will not be able to continue to update DB/DBX in the future.
Click to expand...
what should I do now?
 

My Computers My Computers

System One System Two

  • At a glance

    Windows 11 Pro 25H2Ryzen 5 3500U8GBVega 8
    OS
    Windows 11 Pro 25H2
    Computer type
    Laptop
    Manufacturer/Model
    Huawei MateBook D15
    CPU
    Ryzen 5 3500U
    Memory
    8GB
    Graphics Card(s)
    Vega 8
    Screen Resolution
    FHD
    Hard Drives
    256GB Samsung SSD + 1TB HDD
    Browser
    Microsoft Edge
    Antivirus
    ESET Smart Security Premium

  • At a glance

    Windows 10 Enterprise LTSC 21H2intel core i7 6700HQ16GBNvidia Geforce GTX1060 (6GB)
    Operating System
    Windows 10 Enterprise LTSC 21H2
    Computer type
    Laptop
    Manufacturer/Model
    MSI GS73 6RF Stealth Pro
    CPU
    intel core i7 6700HQ
    Memory
    16GB
    Graphics card(s)
    Nvidia Geforce GTX1060 (6GB)
    Screen Resolution
    FHD
    Hard Drives
    128GB SSD + 1TB HDD
    Browser
    Microsoft Edge
    Antivirus
    Windows Defender

My Computer My Computer

At a glance

Windows 11, version 25H2 (26200)AMD Ryzen 9 9950X 16-Core ProcessorDDR5-6000 (CL36) 64.0 GBNVIDIA GeForce RTX 4090
OS
Windows 11, version 25H2 (26200)
Computer type
PC/Desktop
CPU
AMD Ryzen 9 9950X 16-Core Processor
Motherboard
ASRock B650M PG Riptide
Memory
DDR5-6000 (CL36) 64.0 GB
Graphics Card(s)
NVIDIA GeForce RTX 4090
PSU
1200W
Case
Phanteks Enthoo Pro 2
Cooling
Noctua NH-D12L
You can use the updated Check_EFIBootFile.ps1 script to check the KEK certificate.

www.elevenforum.com

Act now: Secure Boot certificates expire in June 2026

Windows IT Pro Blog: Prepare for the first global large-scale certificate update to Secure Boot. The Microsoft certificates used in Secure Boot are the basis of trust for operating system security, and all will be expiring beginning June 2026. The way to automatically get timely updates to new...
www.elevenforum.com www.elevenforum.com
 

My Computer My Computer

At a glance

Windows 11, version 25H2 (26200)AMD Ryzen 9 9950X 16-Core ProcessorDDR5-6000 (CL36) 64.0 GBNVIDIA GeForce RTX 4090
OS
Windows 11, version 25H2 (26200)
Computer type
PC/Desktop
CPU
AMD Ryzen 9 9950X 16-Core Processor
Motherboard
ASRock B650M PG Riptide
Memory
DDR5-6000 (CL36) 64.0 GB
Graphics Card(s)
NVIDIA GeForce RTX 4090
PSU
1200W
Case
Phanteks Enthoo Pro 2
Cooling
Noctua NH-D12L
uncyler825 said:
All certificates can be downloaded from Microsoft's official website. You can see this POST to learn how to manually import these certificates in BIOS.

learn.microsoft.com

Windows Secure Boot Key Creation and Management Guidance

Windows Secure Boot Key Creation and Management Guidance
learn.microsoft.com
Click to expand...
This method is using UEFI Update tool. I can't add this method to a simple batch file!
This is just a script instead of running powershell commands and restart manually and then check if it's installed or not.
also it shows your bitlocker keys before updating.
 

My Computers My Computers

System One System Two

  • At a glance

    Windows 11 Pro 25H2Ryzen 5 3500U8GBVega 8
    OS
    Windows 11 Pro 25H2
    Computer type
    Laptop
    Manufacturer/Model
    Huawei MateBook D15
    CPU
    Ryzen 5 3500U
    Memory
    8GB
    Graphics Card(s)
    Vega 8
    Screen Resolution
    FHD
    Hard Drives
    256GB Samsung SSD + 1TB HDD
    Browser
    Microsoft Edge
    Antivirus
    ESET Smart Security Premium

  • At a glance

    Windows 10 Enterprise LTSC 21H2intel core i7 6700HQ16GBNvidia Geforce GTX1060 (6GB)
    Operating System
    Windows 10 Enterprise LTSC 21H2
    Computer type
    Laptop
    Manufacturer/Model
    MSI GS73 6RF Stealth Pro
    CPU
    intel core i7 6700HQ
    Memory
    16GB
    Graphics card(s)
    Nvidia Geforce GTX1060 (6GB)
    Screen Resolution
    FHD
    Hard Drives
    128GB SSD + 1TB HDD
    Browser
    Microsoft Edge
    Antivirus
    Windows Defender
Sheikh said:
This method is using UEFI Update tool. I can't add this method to a simple batch file!
This is just a script instead of running powershell commands and restart manually and then check if it's installed or not.
also it shows your bitlocker keys before updating.
Click to expand...

It does not require any tools. It is done in the BIOS.
 

My Computer My Computer

At a glance

Windows 11, version 25H2 (26200)AMD Ryzen 9 9950X 16-Core ProcessorDDR5-6000 (CL36) 64.0 GBNVIDIA GeForce RTX 4090
OS
Windows 11, version 25H2 (26200)
Computer type
PC/Desktop
CPU
AMD Ryzen 9 9950X 16-Core Processor
Motherboard
ASRock B650M PG Riptide
Memory
DDR5-6000 (CL36) 64.0 GB
Graphics Card(s)
NVIDIA GeForce RTX 4090
PSU
1200W
Case
Phanteks Enthoo Pro 2
Cooling
Noctua NH-D12L
Sheikh said:
I can't add this method to a simple batch file!
Click to expand...

This is not your problem, it depends on how Microsoft will deal with the issue of KEK certificate expiration.
 

My Computer My Computer

At a glance

Windows 11, version 25H2 (26200)AMD Ryzen 9 9950X 16-Core ProcessorDDR5-6000 (CL36) 64.0 GBNVIDIA GeForce RTX 4090
OS
Windows 11, version 25H2 (26200)
Computer type
PC/Desktop
CPU
AMD Ryzen 9 9950X 16-Core Processor
Motherboard
ASRock B650M PG Riptide
Memory
DDR5-6000 (CL36) 64.0 GB
Graphics Card(s)
NVIDIA GeForce RTX 4090
PSU
1200W
Case
Phanteks Enthoo Pro 2
Cooling
Noctua NH-D12L
uncyler825 said:
It does not require any tools. It is done in the BIOS.
Click to expand...
Sorry I don't understand...
You say this method is done in the BIOS by user.
And I say this batch file is a simple code to run a simple scheduled task which may update some newer machines.
You expect me to create a script which goes into the bios and installs an update package on it? :|
 

My Computers My Computers

System One System Two

  • At a glance

    Windows 11 Pro 25H2Ryzen 5 3500U8GBVega 8
    OS
    Windows 11 Pro 25H2
    Computer type
    Laptop
    Manufacturer/Model
    Huawei MateBook D15
    CPU
    Ryzen 5 3500U
    Memory
    8GB
    Graphics Card(s)
    Vega 8
    Screen Resolution
    FHD
    Hard Drives
    256GB Samsung SSD + 1TB HDD
    Browser
    Microsoft Edge
    Antivirus
    ESET Smart Security Premium

  • At a glance

    Windows 10 Enterprise LTSC 21H2intel core i7 6700HQ16GBNvidia Geforce GTX1060 (6GB)
    Operating System
    Windows 10 Enterprise LTSC 21H2
    Computer type
    Laptop
    Manufacturer/Model
    MSI GS73 6RF Stealth Pro
    CPU
    intel core i7 6700HQ
    Memory
    16GB
    Graphics card(s)
    Nvidia Geforce GTX1060 (6GB)
    Screen Resolution
    FHD
    Hard Drives
    128GB SSD + 1TB HDD
    Browser
    Microsoft Edge
    Antivirus
    Windows Defender
Sheikh said:
Sorry I don't understand...
You say this method is done in the BIOS by user.
And I say this batch file is a simple code to run a simple scheduled task which may update some newer machines.
You expect me to create a script which goes into the bios and installs an update package on it? :|
Click to expand...

Sorry for the confusion.

What I want to say is that if the KEK certificate expires, users will not be able to update the DB/DBX certificate through the script. Users need to update the KEK certificate first so that Windows can complete this step.
 

My Computer My Computer

At a glance

Windows 11, version 25H2 (26200)AMD Ryzen 9 9950X 16-Core ProcessorDDR5-6000 (CL36) 64.0 GBNVIDIA GeForce RTX 4090
OS
Windows 11, version 25H2 (26200)
Computer type
PC/Desktop
CPU
AMD Ryzen 9 9950X 16-Core Processor
Motherboard
ASRock B650M PG Riptide
Memory
DDR5-6000 (CL36) 64.0 GB
Graphics Card(s)
NVIDIA GeForce RTX 4090
PSU
1200W
Case
Phanteks Enthoo Pro 2
Cooling
Noctua NH-D12L
uncyler825 said:
Sorry for the confusion.

What I want to say is that if the KEK certificate expires, users will not be able to update the DB/DBX certificate through the script. Users need to update the KEK certificate first so that Windows can complete this step.
Click to expand...
Sorry, I can't do anything for that except adding link to "readme" ...
 

My Computers My Computers

System One System Two

  • At a glance

    Windows 11 Pro 25H2Ryzen 5 3500U8GBVega 8
    OS
    Windows 11 Pro 25H2
    Computer type
    Laptop
    Manufacturer/Model
    Huawei MateBook D15
    CPU
    Ryzen 5 3500U
    Memory
    8GB
    Graphics Card(s)
    Vega 8
    Screen Resolution
    FHD
    Hard Drives
    256GB Samsung SSD + 1TB HDD
    Browser
    Microsoft Edge
    Antivirus
    ESET Smart Security Premium

  • At a glance

    Windows 10 Enterprise LTSC 21H2intel core i7 6700HQ16GBNvidia Geforce GTX1060 (6GB)
    Operating System
    Windows 10 Enterprise LTSC 21H2
    Computer type
    Laptop
    Manufacturer/Model
    MSI GS73 6RF Stealth Pro
    CPU
    intel core i7 6700HQ
    Memory
    16GB
    Graphics card(s)
    Nvidia Geforce GTX1060 (6GB)
    Screen Resolution
    FHD
    Hard Drives
    128GB SSD + 1TB HDD
    Browser
    Microsoft Edge
    Antivirus
    Windows Defender
OldNavy said:
This is way too complicated for millions upon millions of computer users.
Microsoft will have to come up with simple procedure for the implementation of this.
Click to expand...

Well they're supposed to push this out through an update to all the machines out there. Both of my Windows 10 machines have already received it.
 

My Computers My Computers

System One System Two

  • At a glance

    Windows 11 Pro 25H2 build: (26200.7623)32GB
    OS
    Windows 11 Pro 25H2 build: (26200.7623)
    Computer type
    Laptop
    Manufacturer/Model
    Microsoft Surface Pro
    Memory
    32GB

  • At a glance

    Microsoft 25H2 ProIntel Core Ultra 764GBIntel Integrated Graphics
    Operating System
    Microsoft 25H2 Pro
    Computer type
    Laptop
    Manufacturer/Model
    Dell Pro 14 - PC14250
    CPU
    Intel Core Ultra 7
    Memory
    64GB
    Graphics card(s)
    Intel Integrated Graphics
    Hard Drives
    Micron 1TB SSD
cheaterslick said:
Well they're supposed to push this out through an update to all the machines out there. Both of my Windows 10 machines have already received it.
Click to expand...
W10 22H2 has the same changes provided in the current Monthly Update. The difference is retail W10 will enter End-of-Life in October, unless you've signed up for the ESU promotion with MS points. It's not clear if MS will force the revocation on W10 PC's with time running out.
 

My Computer My Computer

At a glance

Windows 7
OS
Windows 7
Still waiting to see the Extended security update for my Windows 10 Systems here lol so far didn't see nothing on those lol

Will check again tomorrow lol i suppose
 

My Computers My Computers

System One System Two

  • At a glance

    Windows 11 Pro 25H2 26200.8037AMD Ryzen 7700X32GB DDR 5 RGB 5600MhzRadeon 7800XT
    OS
    Windows 11 Pro 25H2 26200.8037
    Computer type
    PC/Desktop
    Manufacturer/Model
    PreBuilt
    CPU
    AMD Ryzen 7700X
    Motherboard
    MSI B650 VC WIfi Rev 1.0
    Memory
    32GB DDR 5 RGB 5600Mhz
    Graphics Card(s)
    Radeon 7800XT
    Sound Card
    Onboard Audio
    Monitor(s) Displays
    Asus VG245H
    Screen Resolution
    1920x1080
    Hard Drives
    Samsung 990 Evo Plus NVMe Boot
    Samsung 990 Pro 1TB Game NVMe



    External
    Western Digital Elements 500GB
    Western Digital My Passport 2TB Blue
    Western Digital My Passport 2TB Red
    Toshiba 2TB in External Enclosure
    Seagate 8TB in External Enclosure
    Seagate 1TB Portable USB 3 External Drive
    Western Digital My Book 8TB (Primary Backup drive)
    Western Digital Black 4TB In External Enclosure
    PSU
    750 Watt High Power
    Case
    Lian Li Lan Cool 216 ARGB Airflow
    Cooling
    2 160MM Front, 1 140MM Rear Exhaust
    Keyboard
    Logitech G513
    Mouse
    Logitech G502 X
    Internet Speed
    Gigabit 1100Mb/35 Upload
    Browser
    MS Edge Chromium and Bing Search
    Antivirus
    Windows Defender, Malwarebytes Premium
    Other Info
    UEFI, Secure Boot, TPM 2.0, Macrium Reflect X

  • At a glance

    Windows 11 Pro 25H2 26200.8037Ryzen 7 7735HS16GB DDR 5AMD Radeon™ 680M & Radeon 7700S
    Operating System
    Windows 11 Pro 25H2 26200.8037
    Computer type
    Laptop
    Manufacturer/Model
    Asus TUF A16 Advantage Edition FA617NT.A16.R7700
    CPU
    Ryzen 7 7735HS
    Motherboard
    OEM Asus Motherboard
    Memory
    16GB DDR 5
    Graphics card(s)
    AMD Radeon™ 680M & Radeon 7700S
    Sound Card
    Onboard
    Monitor(s) Displays
    16inch FHD 165hz
    Screen Resolution
    1920x1080
    Hard Drives
    512GB NVMe Boot Drive
    PSU
    Laptop PSU
    Case
    Laptop Case
    Cooling
    OEM Cooling
    Keyboard
    OEM Laptop Keyboard
    Mouse
    Touchpad & G502 Hero
    Internet Speed
    Gigabit 1100 Download/35 Upload
    Browser
    MS Edge with Bing search
    Antivirus
    Windows Defender & Malwarebytes Premium
    Other Info
    Macrium Reflect X
garlin said:
W10 22H2 has the same changes provided in the current Monthly Update. The difference is retail W10 will enter End-of-Life in October, unless you've signed up for the ESU promotion with MS points. It's not clear if MS will force the revocation on W10 PC's with time running out.
Click to expand...
Or just use the IoT Enterprise LTSC !
 

My Computers My Computers

System One System Two

  • At a glance

    Windows 11 Pro 25H2Ryzen 5 3500U8GBVega 8
    OS
    Windows 11 Pro 25H2
    Computer type
    Laptop
    Manufacturer/Model
    Huawei MateBook D15
    CPU
    Ryzen 5 3500U
    Memory
    8GB
    Graphics Card(s)
    Vega 8
    Screen Resolution
    FHD
    Hard Drives
    256GB Samsung SSD + 1TB HDD
    Browser
    Microsoft Edge
    Antivirus
    ESET Smart Security Premium

  • At a glance

    Windows 10 Enterprise LTSC 21H2intel core i7 6700HQ16GBNvidia Geforce GTX1060 (6GB)
    Operating System
    Windows 10 Enterprise LTSC 21H2
    Computer type
    Laptop
    Manufacturer/Model
    MSI GS73 6RF Stealth Pro
    CPU
    intel core i7 6700HQ
    Memory
    16GB
    Graphics card(s)
    Nvidia Geforce GTX1060 (6GB)
    Screen Resolution
    FHD
    Hard Drives
    128GB SSD + 1TB HDD
    Browser
    Microsoft Edge
    Antivirus
    Windows Defender
You must log in or register to reply here.

Similar threads

Solved Secure boot update HowTo
31 32 33
Replies
645
Views
111K
TrebleTA
T
  • Sticky
  • Article Article
Updating Microsoft Secure Boot keys before expiration in June 2026
26 27 28
Replies
559
Views
115K
Brink
Brink

Latest Support Threads

Latest Tutorials

Back
Top Bottom