Did you manually update your Secure Boot Keys ?


cool59 said:
Yes, this makes sense, although it needs confirmation:

...
Click to expand...
Oh yes... I'd totally love it for one of the true experts to confirm or clarify my theories here!

But it seems to be pretty obvious that a whole lot of systems are going to be moving forward this way so either it does work similarly or somehow they're bending the rules of the "chain of trust" it's built on (which raises ugly questions about just how "secure" "secure boot" is)... or a lot of people will be disabling Secure Boot or trashing otherwise perfectly good systems.
 

My Computers

System One System Two

  • OS
    Windows 11 Pro
    Computer type
    PC/Desktop
    Manufacturer/Model
    DIY
    CPU
    Ryzen 7 5800X
    Motherboard
    Gigabyte B550M Aorus Pro
    Memory
    GSkill 3200, 2x8GB
    Graphics Card(s)
    MSI RX 6800 XT Gaming Z
    Sound Card
    on-board Realtek
    Monitor(s) Displays
    MSI 180hz
    Screen Resolution
    1440p
    Hard Drives
    Samsung 980 Pro, Samsung 870 Evo, generic PCIe NVME, WD 1TB 2.5" laptop spinner
    PSU
    Corsair RM 650
    Case
    mATX
    Cooling
    BeQuiet 240mm AIO and a bunch of case fans
    Keyboard
    one that clacks softly
    Mouse
    logitech
    Internet Speed
    bunches of bps
    Browser
    Firefox
    Antivirus
    Windows' own
  • Operating System
    Win11 Pro
    Computer type
    PC/Desktop
    Manufacturer/Model
    DIY
    CPU
    Ryzen 7 1700
    Motherboard
    GA-AB350M G-3
    Memory
    16GB DDR4
    Graphics card(s)
    RX-480
    Sound Card
    In-Built Realtek
    Monitor(s) Displays
    Samsung
    Screen Resolution
    1440p
    Hard Drives
    NVME/SSD's
    PSU
    Thermaltake BX1 550W
    Case
    Some junky thing
    Cooling
    ThermalTake Assassin(?)
    Browser
    FF/Edge
    Antivirus
    Whatever Windows does
    Other Info
    Secure Boot enabled updated to 2023 CA keys, TPM2.0 enabled with system drive Bitlocker'd.
Buddywh said:
Oh yes... I'd totally love it for one of the true experts to confirm or clarify my theories here!

But it seems to be pretty obvious that a whole lot of systems are going to be moving forward this way so either it does work similarly or somehow they're bending the rules of the "chain of trust" it's built on (which raises ugly questions about just how "secure" "secure boot" is)... or a lot of people will be disabling Secure Boot or trashing otherwise perfectly good systems.
Click to expand...
Well....IA says no:

"No, a certificate in the UEFI DB is no longer considered valid once the KEK certificate that validates it expires, and this will prevent the system from booting correctly. When a KEK certificate expires, the system can no longer trust the keys in the DB, and new boot components signed with the old certificates will fail verification. Microsoft has announced that its 2011 certificates expire in June 2026, and all devices need to be updated with the new 2023 certificates to maintain Secure Boot functionality. "

;-)
 

My Computer

System One

  • OS
    Windows 11 Pro 25H2
    Computer type
    Laptop
    Manufacturer/Model
    Dell XPS 13 9360
    CPU
    Intel(R) Core(TM) i7-7500U CPU @ 2.70GHz
    Memory
    8 GB
zbook said:
Windows memory testing almost always reports pass (false negatives) when memtest86+ finds errors.
Click to expand...
And both of those usually report back a pass when HCI's MemTest finds errors.
 

My Computers

System One System Two

  • OS
    Windows 11 Pro
    Computer type
    PC/Desktop
    Manufacturer/Model
    DIY
    CPU
    Ryzen 7 5800X
    Motherboard
    Gigabyte B550M Aorus Pro
    Memory
    GSkill 3200, 2x8GB
    Graphics Card(s)
    MSI RX 6800 XT Gaming Z
    Sound Card
    on-board Realtek
    Monitor(s) Displays
    MSI 180hz
    Screen Resolution
    1440p
    Hard Drives
    Samsung 980 Pro, Samsung 870 Evo, generic PCIe NVME, WD 1TB 2.5" laptop spinner
    PSU
    Corsair RM 650
    Case
    mATX
    Cooling
    BeQuiet 240mm AIO and a bunch of case fans
    Keyboard
    one that clacks softly
    Mouse
    logitech
    Internet Speed
    bunches of bps
    Browser
    Firefox
    Antivirus
    Windows' own
  • Operating System
    Win11 Pro
    Computer type
    PC/Desktop
    Manufacturer/Model
    DIY
    CPU
    Ryzen 7 1700
    Motherboard
    GA-AB350M G-3
    Memory
    16GB DDR4
    Graphics card(s)
    RX-480
    Sound Card
    In-Built Realtek
    Monitor(s) Displays
    Samsung
    Screen Resolution
    1440p
    Hard Drives
    NVME/SSD's
    PSU
    Thermaltake BX1 550W
    Case
    Some junky thing
    Cooling
    ThermalTake Assassin(?)
    Browser
    FF/Edge
    Antivirus
    Whatever Windows does
    Other Info
    Secure Boot enabled updated to 2023 CA keys, TPM2.0 enabled with system drive Bitlocker'd.
cool59 said:
Well....IA says no:

"No, a certificate in the UEFI DB is no longer considered valid once the KEK certificate that validates it expires, and this will prevent the system from booting correctly. When a KEK certificate expires, the system can no longer trust the keys in the DB, and new boot components signed with the old certificates will fail verification. Microsoft has announced that its 2011 certificates expire in June 2026, and all devices need to be updated with the new 2023 certificates to maintain Secure Boot functionality. "

;-)
Click to expand...
What is IA? Do you mean AI, i.e., ChatGPT or similar? Don't take anything like that on it's face value as a correct answer from ChatGPT, re-ask the question in several different ways and see just how consistent it is in the details. Even then, it could be just flat out wrong and often is when it requires inferrence. And be especially careful how you ask it: it may think you're asking if you can use the expired KEK to sign a new key to put into DB.

And it might also think you're asking if you could push a key into DB after the KEK's expiration which would probably fail. That's just a guess but it makes sense and would still be a problem if someone resets CMOS.

But if it is true that would indeed be troubling. I've read that while an expired certificate can no longer be used for signing a binary it is still useful, and needed, to validate binaries previously signed by it. If this isn't the case with KEK, then a whole lot of systems will lose Secure Boot at some point even though they have the 2023 DB keys. Either that or somehow a Secure Boot key can be pushed into DB that doesn't need a valid KEK for the DB key to continue validating signed EFI boot files once the KEK is expired... which completely breaks the chain of trust, making Secure Boot a farce.

But the Microsoft statement is so simplified and incomplete it's not all that useful for understanding in the details.
 
Last edited:

My Computers

System One System Two

  • OS
    Windows 11 Pro
    Computer type
    PC/Desktop
    Manufacturer/Model
    DIY
    CPU
    Ryzen 7 5800X
    Motherboard
    Gigabyte B550M Aorus Pro
    Memory
    GSkill 3200, 2x8GB
    Graphics Card(s)
    MSI RX 6800 XT Gaming Z
    Sound Card
    on-board Realtek
    Monitor(s) Displays
    MSI 180hz
    Screen Resolution
    1440p
    Hard Drives
    Samsung 980 Pro, Samsung 870 Evo, generic PCIe NVME, WD 1TB 2.5" laptop spinner
    PSU
    Corsair RM 650
    Case
    mATX
    Cooling
    BeQuiet 240mm AIO and a bunch of case fans
    Keyboard
    one that clacks softly
    Mouse
    logitech
    Internet Speed
    bunches of bps
    Browser
    Firefox
    Antivirus
    Windows' own
  • Operating System
    Win11 Pro
    Computer type
    PC/Desktop
    Manufacturer/Model
    DIY
    CPU
    Ryzen 7 1700
    Motherboard
    GA-AB350M G-3
    Memory
    16GB DDR4
    Graphics card(s)
    RX-480
    Sound Card
    In-Built Realtek
    Monitor(s) Displays
    Samsung
    Screen Resolution
    1440p
    Hard Drives
    NVME/SSD's
    PSU
    Thermaltake BX1 550W
    Case
    Some junky thing
    Cooling
    ThermalTake Assassin(?)
    Browser
    FF/Edge
    Antivirus
    Whatever Windows does
    Other Info
    Secure Boot enabled updated to 2023 CA keys, TPM2.0 enabled with system drive Bitlocker'd.
Buddywh said:
What is IA? Do you mean AI, i.e., ChatGPT or similar? Don't take anything like that on it's face value as a correct answer from ChatGPT, re-ask the question in several different ways and see just how consistent it is in the details. Even then, it could be just flat out wrong and often is when it requires inferrence. And be especially careful how you ask it: it may think you're asking if you can use the expired KEK to sign a new key to put into DB.

But that would indeed be troubling. I've read that while an expired certificate can no longer be used for signing a binary it is still useful, and needed, to validate binaries previously signed by it. If this isn't the case with KEK, then a whole lot of systems will lose Secure Boot at some point even though they have the 2023 DB keys. Either that or somehow a Secure Boot key can be pushed into DB that doesn't need a valid KEK for the DB key to continue validating signed EFI boot files once the KEK is expired... which completely breaks the chain of trust, making Secure Boot a farce.

But the Microsoft statement is so simplified and incomplete it's not all that useful for understanding in the details.
Click to expand...
Yes, sorry, I meant AI.
It's worth what it's worth, or maybe not much.
I'd like to hear an expert's opinion.
If the certificates in the DB remained valid after the KEKS that validated them expired, my problem would be solved.
;-)!
 

My Computer

System One

  • OS
    Windows 11 Pro 25H2
    Computer type
    Laptop
    Manufacturer/Model
    Dell XPS 13 9360
    CPU
    Intel(R) Core(TM) i7-7500U CPU @ 2.70GHz
    Memory
    8 GB
cool59 said:
This topic is way beyond my limited technical knowledge.
When I start reading about running Mosby and entering setup mode on my Dell XPS 13 9360 (which is a bit awkward when it comes to using the BIOS), I get scared and afraid of bricking the PC.
I've repeated the commands several times without success.
The command in Powershell doesn't seem to execute, even though I run it as an administrator.
Maybe I'll wait a little longer before things get worse.
And yes, this is the key I need (2023 Microsoft Corporation KEK 2k CA 2023 key).
I don't know why it won't enter the BIOS.

PS - Thanks for the important and valuable help you've given.
Very grateful!

Thanks a lot! ;-)
Click to expand...
You're missing the Kek key.
Try this script, and follow the instructions carefully (this also forces updates from Windows Update):

rog-forum.asus.com

[INFORMATION] Secure Boot : Windows UEFI CA 2023 Update

Hi everyone, https://support.microsoft.com/topic/1db237d8-9f3b-4218-9515-3e0a32729685 https://support.microsoft.com/topic/a7be69c9-4634-42e1-9ca1-df06f43f360d - Secure Boot Windows UEFI CA 2023 Updater | Download : Link Check/Update Process : Check Windows UEFI CA 2023 Update...
rog-forum.asus.com rog-forum.asus.com

Once done, run the verification scripts again.
 

My Computer

System One

  • OS
    windows 11
cool59 said:
...
If the certificates in the DB remained valid after the KEKS that validated them expired, my problem would be solved.
;-)!
Click to expand...
Not necessarily... there are still nuances. I'm not trying to say it's not worth pursuing still, if you can. I too would like to know all keys are there which is why I pursued using MOSBY on my ancient system which never got a KEK whatever I did to it previously.

But an expert's explanation of how this works is very much good to have, just because I'm intrigued by all this if nothing else.
 

My Computers

System One System Two

  • OS
    Windows 11 Pro
    Computer type
    PC/Desktop
    Manufacturer/Model
    DIY
    CPU
    Ryzen 7 5800X
    Motherboard
    Gigabyte B550M Aorus Pro
    Memory
    GSkill 3200, 2x8GB
    Graphics Card(s)
    MSI RX 6800 XT Gaming Z
    Sound Card
    on-board Realtek
    Monitor(s) Displays
    MSI 180hz
    Screen Resolution
    1440p
    Hard Drives
    Samsung 980 Pro, Samsung 870 Evo, generic PCIe NVME, WD 1TB 2.5" laptop spinner
    PSU
    Corsair RM 650
    Case
    mATX
    Cooling
    BeQuiet 240mm AIO and a bunch of case fans
    Keyboard
    one that clacks softly
    Mouse
    logitech
    Internet Speed
    bunches of bps
    Browser
    Firefox
    Antivirus
    Windows' own
  • Operating System
    Win11 Pro
    Computer type
    PC/Desktop
    Manufacturer/Model
    DIY
    CPU
    Ryzen 7 1700
    Motherboard
    GA-AB350M G-3
    Memory
    16GB DDR4
    Graphics card(s)
    RX-480
    Sound Card
    In-Built Realtek
    Monitor(s) Displays
    Samsung
    Screen Resolution
    1440p
    Hard Drives
    NVME/SSD's
    PSU
    Thermaltake BX1 550W
    Case
    Some junky thing
    Cooling
    ThermalTake Assassin(?)
    Browser
    FF/Edge
    Antivirus
    Whatever Windows does
    Other Info
    Secure Boot enabled updated to 2023 CA keys, TPM2.0 enabled with system drive Bitlocker'd.
itsme1 said:
You're missing the Kek key.
Try this script, and follow the instructions carefully (this also forces updates from Windows Update):

rog-forum.asus.com

[INFORMATION] Secure Boot : Windows UEFI CA 2023 Update

Hi everyone, https://support.microsoft.com/topic/1db237d8-9f3b-4218-9515-3e0a32729685 https://support.microsoft.com/topic/a7be69c9-4634-42e1-9ca1-df06f43f360d - Secure Boot Windows UEFI CA 2023 Updater | Download : Link Check/Update Process : Check Windows UEFI CA 2023 Update...
rog-forum.asus.com rog-forum.asus.com

Once done, run the verification scripts again.
Click to expand...
Hello!
I've tried and tried again.
That's what installed the certificates in the database.
However, the KEK didn't work.
When I check the "check" script, it says "in progress" for hours...
 

My Computer

System One

  • OS
    Windows 11 Pro 25H2
    Computer type
    Laptop
    Manufacturer/Model
    Dell XPS 13 9360
    CPU
    Intel(R) Core(TM) i7-7500U CPU @ 2.70GHz
    Memory
    8 GB
cool59 said:
Hello!
I've tried and tried again.
That's what installed the certificates in the database.
However, the KEK didn't work.
When I check the "check" script, it says "in progress" for hours...
Click to expand...
Which Windows 11 build do you have? You must have Windows 11 build 26100.6899/26200.6899.
 

My Computer

System One

  • OS
    windows 11
itsme1 said:
Which Windows 11 build do you have? You must have Windows 11 build 26100.6899/26200.6899.
Click to expand...
Or later I hope?

I'm on 26200.6901 (25h2) according to WinVer
 

My Computers

System One System Two

  • OS
    Windows 11 Pro
    Computer type
    PC/Desktop
    Manufacturer/Model
    DIY
    CPU
    Ryzen 7 5800X
    Motherboard
    Gigabyte B550M Aorus Pro
    Memory
    GSkill 3200, 2x8GB
    Graphics Card(s)
    MSI RX 6800 XT Gaming Z
    Sound Card
    on-board Realtek
    Monitor(s) Displays
    MSI 180hz
    Screen Resolution
    1440p
    Hard Drives
    Samsung 980 Pro, Samsung 870 Evo, generic PCIe NVME, WD 1TB 2.5" laptop spinner
    PSU
    Corsair RM 650
    Case
    mATX
    Cooling
    BeQuiet 240mm AIO and a bunch of case fans
    Keyboard
    one that clacks softly
    Mouse
    logitech
    Internet Speed
    bunches of bps
    Browser
    Firefox
    Antivirus
    Windows' own
  • Operating System
    Win11 Pro
    Computer type
    PC/Desktop
    Manufacturer/Model
    DIY
    CPU
    Ryzen 7 1700
    Motherboard
    GA-AB350M G-3
    Memory
    16GB DDR4
    Graphics card(s)
    RX-480
    Sound Card
    In-Built Realtek
    Monitor(s) Displays
    Samsung
    Screen Resolution
    1440p
    Hard Drives
    NVME/SSD's
    PSU
    Thermaltake BX1 550W
    Case
    Some junky thing
    Cooling
    ThermalTake Assassin(?)
    Browser
    FF/Edge
    Antivirus
    Whatever Windows does
    Other Info
    Secure Boot enabled updated to 2023 CA keys, TPM2.0 enabled with system drive Bitlocker'd.

My Computer

System One

  • OS
    Windows 11 Pro 25H2
    Computer type
    Laptop
    Manufacturer/Model
    Dell XPS 13 9360
    CPU
    Intel(R) Core(TM) i7-7500U CPU @ 2.70GHz
    Memory
    8 GB
Yes, it's Windows 11 build 26100.6899/26200.6899 and later.

There may currently be a problem with some computers updating 2023 certificates via Windows Update, which Microsoft will fix.

You can go into the Dell BIOS and enable Custom mode in Secure mode and try the MoKiChU script again. If that works, disable Custom mode in the BIOS.
This won't lock your BIOS.
 

My Computer

System One

  • OS
    windows 11
itsme1 said:
Yes, it's Windows 11 build 26100.6899/26200.6899 and later.

There may currently be a problem with some computers updating 2023 certificates via Windows Update, which Microsoft will fix.

You can go into the Dell BIOS and enable Custom mode in Secure mode and try the MoKiChU script again. If that works, disable Custom mode in the BIOS.
This won't lock your BIOS.
Click to expand...
Thanks!

I'l try later...but damn...since a few hours ago Microsoft Defender blocks the MoKiChU script like a trojan.....
Yesterday has no problem at all.....
 

My Computer

System One

  • OS
    Windows 11 Pro 25H2
    Computer type
    Laptop
    Manufacturer/Model
    Dell XPS 13 9360
    CPU
    Intel(R) Core(TM) i7-7500U CPU @ 2.70GHz
    Memory
    8 GB
cool59 said:
Thanks!

I'l try later...but damn...since a few hours ago Microsoft Defender blocks the MoKiChU script like a trojan.....
Yesterday has no problem at all.....
Click to expand...
Yeah... it did for me too. It must find a command that writes to or reads from a secure area (BIOS secure boot variables perhaps?) or something like that. I had to dig it out of quarantine and allow it to get it to desktop. I assumed it would be safe since it's so widely linked here, and @MoKiChU isn't exactly an unknown.
 

My Computers

System One System Two

  • OS
    Windows 11 Pro
    Computer type
    PC/Desktop
    Manufacturer/Model
    DIY
    CPU
    Ryzen 7 5800X
    Motherboard
    Gigabyte B550M Aorus Pro
    Memory
    GSkill 3200, 2x8GB
    Graphics Card(s)
    MSI RX 6800 XT Gaming Z
    Sound Card
    on-board Realtek
    Monitor(s) Displays
    MSI 180hz
    Screen Resolution
    1440p
    Hard Drives
    Samsung 980 Pro, Samsung 870 Evo, generic PCIe NVME, WD 1TB 2.5" laptop spinner
    PSU
    Corsair RM 650
    Case
    mATX
    Cooling
    BeQuiet 240mm AIO and a bunch of case fans
    Keyboard
    one that clacks softly
    Mouse
    logitech
    Internet Speed
    bunches of bps
    Browser
    Firefox
    Antivirus
    Windows' own
  • Operating System
    Win11 Pro
    Computer type
    PC/Desktop
    Manufacturer/Model
    DIY
    CPU
    Ryzen 7 1700
    Motherboard
    GA-AB350M G-3
    Memory
    16GB DDR4
    Graphics card(s)
    RX-480
    Sound Card
    In-Built Realtek
    Monitor(s) Displays
    Samsung
    Screen Resolution
    1440p
    Hard Drives
    NVME/SSD's
    PSU
    Thermaltake BX1 550W
    Case
    Some junky thing
    Cooling
    ThermalTake Assassin(?)
    Browser
    FF/Edge
    Antivirus
    Whatever Windows does
    Other Info
    Secure Boot enabled updated to 2023 CA keys, TPM2.0 enabled with system drive Bitlocker'd.
You need to make an exclusion in Windows Defender, perhaps it will work without detection.
 

My Computer

System One

  • OS
    windows 11
I was already showing having these on this machine but whatever the new BIOS update yesterday says it contains the new 2023 Secure Boot Certificates 🤷🏽‍♂️
 

My Computers

System One System Two

  • OS
    Windows 11 25H2
    Computer type
    Laptop
    Manufacturer/Model
    Alienware 18 Area-51
    CPU
    Intel Core Ultra 9 275HX (24-Core)
    Motherboard
    Alienware
    Memory
    64GB DDR5 6400MT/s
    Graphics Card(s)
    NVIDIA GeForce RTX 5080 and Intel UHD Graphics
    Sound Card
    Onboard, Realtek high-performance Audio chips (ALC3329 & ALC1708))
    Monitor(s) Displays
    300HZ 18-inch QHD 500 nit Comfort View+
    Screen Resolution
    2560 x 1600
    Hard Drives
    2TB NVMe M.2 PCIe Gen 5 SSD
    Case
    Magnesium Alloy
    Cooling
    Advanced Cryo-Tech Quad-Fan Cooling system & large vapor chamber
    Keyboard
    Cherry MX ultra low profile mechanical keyboard with per key AlienFX RGB lighting
    Mouse
    Logitech MX Master 4
    Browser
    Vivaldi (main), Firefox, Chrome, Edge
    Antivirus
    MS Defender and Malwarebytes Free
  • Operating System
    Windows 11 25H2
    Computer type
    Laptop
    Manufacturer/Model
    Microsoft Surface Laptop 7
    CPU
    Qualcomm Snapdragon X Elite (12 Core) ARM based CPU
    Motherboard
    Microsoft Corp.
    Memory
    16GB LPDDR5
    Graphics card(s)
    Qualcomm Adreno X1-85
    Sound Card
    Omnisonic speakers with Dolby Atmos spatial sound
    Monitor(s) Displays
    120 Hz 13.8-inch 600 nit PixelSense Flow touchscreen
    Screen Resolution
    2304x1536
    Hard Drives
    1TB NVMe Gen 4 SSD
    Case
    Anodized Aluminum
    Cooling
    Traditional active cooling fan system
    Keyboard
    Mechanical QWERTY, backlit when in use
    Mouse
    Logitech MX Master 4 and Surface Arc Mouse
    Browser
    Vivaldi (main), Firefox, Chrome, Edge
    Antivirus
    MS Defender and Malwarebytes Free
Please add some punctuation. It makes no sense as is.
 

My Computers

System One System Two

  • OS
    Windows 11 Pro 25H2 26200.8524
    Computer type
    Laptop
    Manufacturer/Model
    Acemagic LX15PRO
    CPU
    AMD Ryzen 7 5825U with Radeon Graphics
    Memory
    16GB
    Screen Resolution
    1920 x 1080
    Hard Drives
    SSD 2TB
    Internet Speed
    30 Mbps
    Browser
    Brave
    Antivirus
    Webroot Secure Anywhere
    Other Info
    System 3

    Acer Swift SF114-34 laptop
    OS Windows 11 Pro 26200.8524
    CPU Pentium Silver N6000
    RAM 4GB
    SSD Samsung 970 EVO Plus SSD 2TB (an upgrade)
  • Operating System
    Windows 11 Pro 23H2 22631.2506
    Computer type
    Laptop
    Manufacturer/Model
    HP Mini 210-1090NR PC (bought in late 2009!)
    CPU
    Atom N450 1.66GHz
    Memory
    2GB
    Browser
    Brave
    Antivirus
    Webroot
kelper said:
Please add some punctuation. It makes no sense as is.
Click to expand...
Who are you addressing? It makes perfect sense, I had the 2023 Secure Boot Certificates already but they were added again with the new BIOS update I got from DELL yesterday.
 

My Computers

System One System Two

  • OS
    Windows 11 25H2
    Computer type
    Laptop
    Manufacturer/Model
    Alienware 18 Area-51
    CPU
    Intel Core Ultra 9 275HX (24-Core)
    Motherboard
    Alienware
    Memory
    64GB DDR5 6400MT/s
    Graphics Card(s)
    NVIDIA GeForce RTX 5080 and Intel UHD Graphics
    Sound Card
    Onboard, Realtek high-performance Audio chips (ALC3329 & ALC1708))
    Monitor(s) Displays
    300HZ 18-inch QHD 500 nit Comfort View+
    Screen Resolution
    2560 x 1600
    Hard Drives
    2TB NVMe M.2 PCIe Gen 5 SSD
    Case
    Magnesium Alloy
    Cooling
    Advanced Cryo-Tech Quad-Fan Cooling system & large vapor chamber
    Keyboard
    Cherry MX ultra low profile mechanical keyboard with per key AlienFX RGB lighting
    Mouse
    Logitech MX Master 4
    Browser
    Vivaldi (main), Firefox, Chrome, Edge
    Antivirus
    MS Defender and Malwarebytes Free
  • Operating System
    Windows 11 25H2
    Computer type
    Laptop
    Manufacturer/Model
    Microsoft Surface Laptop 7
    CPU
    Qualcomm Snapdragon X Elite (12 Core) ARM based CPU
    Motherboard
    Microsoft Corp.
    Memory
    16GB LPDDR5
    Graphics card(s)
    Qualcomm Adreno X1-85
    Sound Card
    Omnisonic speakers with Dolby Atmos spatial sound
    Monitor(s) Displays
    120 Hz 13.8-inch 600 nit PixelSense Flow touchscreen
    Screen Resolution
    2304x1536
    Hard Drives
    1TB NVMe Gen 4 SSD
    Case
    Anodized Aluminum
    Cooling
    Traditional active cooling fan system
    Keyboard
    Mechanical QWERTY, backlit when in use
    Mouse
    Logitech MX Master 4 and Surface Arc Mouse
    Browser
    Vivaldi (main), Firefox, Chrome, Edge
    Antivirus
    MS Defender and Malwarebytes Free
FrancoDT said:
.... I had the 2023 Secure Boot Certificates already but they were added again with the new BIOS update I got from DELL yesterday
Click to expand...
Is there a question in there?
 

My Computers

System One System Two

  • OS
    Windows 11 Pro
    Computer type
    PC/Desktop
    Manufacturer/Model
    DIY
    CPU
    Ryzen 7 5800X
    Motherboard
    Gigabyte B550M Aorus Pro
    Memory
    GSkill 3200, 2x8GB
    Graphics Card(s)
    MSI RX 6800 XT Gaming Z
    Sound Card
    on-board Realtek
    Monitor(s) Displays
    MSI 180hz
    Screen Resolution
    1440p
    Hard Drives
    Samsung 980 Pro, Samsung 870 Evo, generic PCIe NVME, WD 1TB 2.5" laptop spinner
    PSU
    Corsair RM 650
    Case
    mATX
    Cooling
    BeQuiet 240mm AIO and a bunch of case fans
    Keyboard
    one that clacks softly
    Mouse
    logitech
    Internet Speed
    bunches of bps
    Browser
    Firefox
    Antivirus
    Windows' own
  • Operating System
    Win11 Pro
    Computer type
    PC/Desktop
    Manufacturer/Model
    DIY
    CPU
    Ryzen 7 1700
    Motherboard
    GA-AB350M G-3
    Memory
    16GB DDR4
    Graphics card(s)
    RX-480
    Sound Card
    In-Built Realtek
    Monitor(s) Displays
    Samsung
    Screen Resolution
    1440p
    Hard Drives
    NVME/SSD's
    PSU
    Thermaltake BX1 550W
    Case
    Some junky thing
    Cooling
    ThermalTake Assassin(?)
    Browser
    FF/Edge
    Antivirus
    Whatever Windows does
    Other Info
    Secure Boot enabled updated to 2023 CA keys, TPM2.0 enabled with system drive Bitlocker'd.

My Computers

System One System Two

  • OS
    Windows 11 25H2
    Computer type
    Laptop
    Manufacturer/Model
    Alienware 18 Area-51
    CPU
    Intel Core Ultra 9 275HX (24-Core)
    Motherboard
    Alienware
    Memory
    64GB DDR5 6400MT/s
    Graphics Card(s)
    NVIDIA GeForce RTX 5080 and Intel UHD Graphics
    Sound Card
    Onboard, Realtek high-performance Audio chips (ALC3329 & ALC1708))
    Monitor(s) Displays
    300HZ 18-inch QHD 500 nit Comfort View+
    Screen Resolution
    2560 x 1600
    Hard Drives
    2TB NVMe M.2 PCIe Gen 5 SSD
    Case
    Magnesium Alloy
    Cooling
    Advanced Cryo-Tech Quad-Fan Cooling system & large vapor chamber
    Keyboard
    Cherry MX ultra low profile mechanical keyboard with per key AlienFX RGB lighting
    Mouse
    Logitech MX Master 4
    Browser
    Vivaldi (main), Firefox, Chrome, Edge
    Antivirus
    MS Defender and Malwarebytes Free
  • Operating System
    Windows 11 25H2
    Computer type
    Laptop
    Manufacturer/Model
    Microsoft Surface Laptop 7
    CPU
    Qualcomm Snapdragon X Elite (12 Core) ARM based CPU
    Motherboard
    Microsoft Corp.
    Memory
    16GB LPDDR5
    Graphics card(s)
    Qualcomm Adreno X1-85
    Sound Card
    Omnisonic speakers with Dolby Atmos spatial sound
    Monitor(s) Displays
    120 Hz 13.8-inch 600 nit PixelSense Flow touchscreen
    Screen Resolution
    2304x1536
    Hard Drives
    1TB NVMe Gen 4 SSD
    Case
    Anodized Aluminum
    Cooling
    Traditional active cooling fan system
    Keyboard
    Mechanical QWERTY, backlit when in use
    Mouse
    Logitech MX Master 4 and Surface Arc Mouse
    Browser
    Vivaldi (main), Firefox, Chrome, Edge
    Antivirus
    MS Defender and Malwarebytes Free
You must log in or register to reply here.

Similar threads

Solved Secure boot update HowTo
30 31 32
Replies
622
Views
101K
XxXxX
XxXxX
  • Sticky
  • Article Article
Updating Microsoft Secure Boot keys before expiration in June 2026
26 27 28
Replies
552
Views
108K
garlin
G

Latest Support Threads

Latest Tutorials

Back
Top Bottom