UEFI KEK Certs not updated.

I have a Huawei D14 matebook from 2021 and updated the microsoft certificates, when I check this I get the following output, I see that the KEK cert is not updated is that stored in the bios ? Am I safe this way? Please help.

I also have this warning.

Maybe just wait a bit and keep restarting now and then and check the security settings again. When I did them on a few laptops, it took a few hours to "filter through" before the security settings changed (gradually) to you have everything needed or whatever. Leave the computer on for a few hours then restart maybe.

How did you update the security certificates? Via Windows update? Also keep running Windows update.

Just my two pennorth, but others, more expert than me, may know more.

I suggest you should read the thread at garlin's PowerShell scripts for updating Secure Boot CA 2023

It will be a long read. You should be prepared to spare enough time.

Hope this helps.

this may explain better how the KEK database is updated
they will normally update after the 2023 certs have been installed by Windows update
or by a BIOS update from the manufacturer

also here is a MS KEK key update which has links to the KEK keys for downlaod
the download for the KEK keys downlaod is about halfway down the page.

so first use the KEK keys form MS then check Windows update then check the manufacturers website.
best of luck Steve ..

All you need to do is let MS do it's analysis and it will be done automatically.
So you need it connected up for sometime, maybe days. Checking Windows updates now and again.
That should be all you need to do for a 2021 machine.
You could check the Manufacturers updates for your specific product but I doubt you will get anything after so many years.

If you read too much about the subject it gets overcomplicated, error prone, and wastes your time.