Do I need to update the GOP on my MSI GTX 1650 D6 VENTUS XS OCV3?

ChillWays · Jun 23, 2026

I just found out about that GOP on NVIDIA GPUs are going to expire and I now wonder if I need to update the GOP on my NVIDIA GPU?

I have a 'MSI GTX 1650 D6 VENTUS XS OCV3' GPU on a 'B550M PRO-VDH WIFI' motherboard.

I have the latest version of the motherboard BIOS '7C95v2O'(2026-05-11), that has a updated Secure Boot Key =

B550M PRO-VDH WIFI

Best AMD AM4 B550 MATX motherboard, lightning PCIe 4.0, lightning M.2, USB 3.2 Gen 1, M.2 heatsink, wifi AC, powerful overclocking, MSI PRO

www.msi.com

In 'Windows 11', it says that I have all the required certificates =

Am I safe or do I need to update the GOP?

My GPUs support page don't have a GOP or VBIOS updater =

https://www.msi.com/Graphics-Card/GeForce-GTX-1650-D6-VENTUS-XS-OCV3/support#driver

Through Google I have found several 'NVIDIA Graphics Firmware Update Tools', but according to their description they are either for older or newer GPUs.

Is there a way for me to check if I need to update the GOP and can I update the GOP on my 'MSI GTX 1650 D6 VENTUS XS OCV3'?

garlin · Jun 23, 2026

At this point, you have the CA 2023 certs applied. The problem for older NVIDIA cards is some have firmware signed using the PCA 2011 cert, which is scheduled to be revoked later this year. When that happens, your GPU won't communicate with the BIOS during start-up.

There are 3rd-party tools discussed in the NVIDIA community forum, which try to re-sign the existing firmware. But modding support may not exist for all older models. You'll have to browse the NVIDIA forums for the latest details.

Assuming your GPU can't be updated, the last resort is to prevent the PCA 2011 from getting revoked by Windows. This is acceptable, since you've already installed the updated CA 2023 certs.

Run this command as Admin:

Code:

schtasks.exe /Change /TN "\Microsoft\Windows\PI\Secure-Boot-Update" /Disable

Ghot · Jun 23, 2026

@garlin

I have the same question. EVGA 08G-P4-2172-KR Geforce RTX 2070 8GB vid card

Is there a way to undo my Revoke (YELLOW dots), and is that the best move?

EVGA said this (via email, just now)

Hi Mike,

This card already supports Secure Boot and all Nvidia GeForce cards starting with the GeForce 700 series have shipped with a firmware/vBIOS that supports Secure Boot so we do not have one to update it from not supporting Secure Boot to one that supports Secure Boot. To enable it you would need to go into your motherboard's BIOS and disable CSM, enable Secure Boot, and disable Fast Boot then save and exit for it to take effect and from your screenshot Secure Boot is already enabled.

I apologize for any confusion.

Regards,
EVGA

Only problem is... this motherboard "likes" to have CSM enabled.
Fast Boot is Disabled and Secure Boot and CSM are enabled.

Brb, I double check BIOS settings...

KevTech · Jun 23, 2026

ChillWays said:
I just found out about that GPO on NVIDIA GPU

It is GOP not GPO.

garlin · Jun 23, 2026

In your case, PCA 2011 has already been revoked (we know because you have a SVN). So if don't see any problems right now, then you're not susceptible to the problem. The problem happens as soon as CA 2011 is revoked.

Besides disabling Secure Boot mode, someone could reset their certs back to the CA 2011 factory defaults, which allows the legacy NVIDIA firmware to continue working.

garlin · Jun 23, 2026

KevTech said:
It is GOP not GPO.

Yeah, but I was wondering if the OP was asking if a GPO was available to block revocations. I don't believe there is one explicitly for that step.

suatcini54 · Jun 23, 2026

My GFX card (MSI GeForce GTX 1050Ti) has the same problem. I revoked PCA2011. After that my BIOS complained about incompatible gfx card vBIOS. I have all of the updated secure boot certificates. I had to enable CSM in BIOS. Problem solved. I don't know if it is easy to break a system through GOP's outdated certificate.

KevTech · Jun 23, 2026

garlin said:
Yeah, but I was wondering if the OP was asking if a GPO was available to block revocations. I don't believe there is one explicitly for that step.

I thought GOP as they were asking about updating it.

ChillWays said:
Is there a way for me to check if I need to update the GPO and can I update the GPO

Anyway, official and unofficial tools to update GOP on older cards is at reddit.

https://www.reddit.com/r/nvidia/comments/1n1jroi/psa_secure_boot_2026_june_cert_expiry_can_block

Ghot · Jun 23, 2026

garlin said:
Yeah, but I was wondering if the OP was asking if a GPO was available to block revocations. I don't believe there is one explicitly for that step.

After Googling a bit... it seems that various sites call it GPO and some call it GOP (go figure)

OAT · Jun 23, 2026

KevTech said:
It is GOP not GPO.

ChillWays · Jun 23, 2026

garlin said:
Run this command as Admin:

Code:

schtasks.exe /Change /TN "\Microsoft\Windows\PI\Secure-Boot-Update" /Disable

Can this be reversed later if I find a solution?

garlin · Jun 23, 2026

GOP is the protocol that UEFI uses in Secure Boot mode to communicate with 3rd-party devices like GPU's or storage controllers. If your GPU has the wrong signing cert, then your UEFI refuses to talk to them and your GPU can't display video while in BIOS.

Separately there are a handful of Windows GPO's to manage the Secure Boot task's behavior.

So the question may play out as "my GPU is signed by CA 2011, and won't talk during GOP, and therefore is there a GPO to block banning CA 2011"... /ahem

garlin · Jun 23, 2026

ChillWays said:
Can this be reversed later if I find a solution?

Yes. /Disable -> /Enable

Ghot · Jun 23, 2026

@garlin

I see a need for a clear cut topic/guide about this.
I nominate... you, as this is above my pay grade.

Just in the past week, I've 2-3 topics about "black screens".

It seems that if this problem occurs due to MS's certifications idiocy... we won't be able to SEE the BIOS, to disable Secure Boot, if needed.

glasskuter · Jun 23, 2026

Is this example #xxxxxx about SB crap? Or is it example #yyyyyy? I'd have worked myself into a stroke by now if I was involved and that's not an exaggeration. So glad I'm not tied in with the revocations. @garlin you don't get the appreciation you deserve for your involvement with this.

garlin · Jun 23, 2026

The GOP (or more accurately the GPU's ROM firmware) has been a topic that's been lurking in the background for several years. But the pending 2026 revocation has put the problem into sharp focus.

Ironically, if your PC was unsupported, then you can't revoke CA 2011 and get into trouble with the outdated GOP.

HeavyHemi · Jun 23, 2026

Well I can report that I have revoked the 2011 certs and my RTX 3080Ti, circa 2021, boots fine.

suatcini54 · Jun 23, 2026

I can only talk about my Asus M/B's AMI BIOS from late 2014. New modern BIOSes may be different. I haven't seen a recent modern BIOS.

If some setting creates a Boot problem, there is always something that can be done easily or with some difficulty depending on some settings in BIOS.

When you turn on your PC, you always see the BIOS post screen. There is no such thing as Secure Boot at this stage. You can get into BIOS by pressing a KEY on the keyboard and make any setting changes you like if Boot Logo Display is on Auto or Full Screen. Otherwise, you have to guess when to press Del or F2 key or what.

Then you may have a setting Wait for 'F1' If Error. If you enable this, you will see a message if an error is encountered, such as vBIOS incompatibility due to certificates when Secure Boot is enabled. The BIOS asks you to press F1 to make changes in BIOS, such as Disable Secure Boot or Enable CSM, whatever.

Depending on your OptionROM Messages setting, you see all BIOS post screen messages.

If everything fails, then there is the BIOS reset option. For this, PC case cover may have to be opened and CMOS battery removed or RTC pins shorted.

Do I need to update the GOP on my MSI GTX 1650 D6 VENTUS XS OCV3?

New member

My Computer My Computer

At a glance

Well-known member

My Computer My Computer

At a glance

Well-known member

My Computers My Computers

At a glance

At a glance

Well-known member

My Computer My Computer

At a glance

Well-known member

My Computer My Computer

At a glance

Well-known member

My Computer My Computer

At a glance

Well-known member

My Computers My Computers

At a glance

At a glance

Well-known member

My Computer My Computer

At a glance

Well-known member

My Computers My Computers

At a glance

At a glance

"No need to be anybody but oneself"

My Computers My Computers

At a glance

At a glance

New member

My Computer My Computer

At a glance

Well-known member

My Computer My Computer

At a glance

Well-known member

My Computer My Computer

At a glance

Well-known member

My Computers My Computers

At a glance

At a glance

aka Mama Glass

My Computers My Computers

At a glance

At a glance

Well-known member

My Computer My Computer

At a glance

Well-known member

My Computer My Computer

At a glance

Well-known member

Attachments

My Computers My Computers

At a glance

At a glance

Similar threads

My Computer

My Computer

My Computers

My Computer

My Computer

My Computer

My Computers

My Computer

My Computers

My Computers

My Computer

My Computer

My Computer

My Computers

My Computers

My Computer

My Computer

My Computers