Windows Secure Boot Key Creation

Reviewing “Windows Secure Boot Key Creation and Management Guidance” and not being computer proficient I’m not sure which certificate(s) I need. Do I need all three?

Any advice would be appreciated.

(1) Windows UEFI CA 2023 (2) Microsoft UEFI CA 2023 (3) Microsoft Option ROM UEFI CA 2023

Someone correct me if I am wrong, but the Microsoft release notes today state that for home / consumer users no action is needed other than to allow the latest updates to be installed on your machine and to have Secure Boot enabled. The cert updates will then be automatic.

gtspeck said:

Reviewing “Windows Secure Boot Key Creation and Management Guidance” and not being computer proficient I’m not sure which certificate(s) I need. Do I need all three?

Any advice would be appreciated.

(1) Windows UEFI CA 2023 (2) Microsoft UEFI CA 2023 (3) Microsoft Option ROM UEFI CA 2023

Click to expand...

Only the first two certs are really critical for home users.

Windows UEFI is for booting Windows
Microsoft UEFI is for booting EFI tools, or non-Windows OS'es like Linux
Microsoft Option ROM is for 3rd-parties to sign their own UEFI code

hsehestedt said:

Someone correct me if I am wrong, but the Microsoft release notes today state that for home / consumer users no action is needed other than to allow the latest updates to be installed on your machine and to have Secure Boot enabled. The cert updates will then be automatic.

Click to expand...

There will be automatic updates some time next year. Right now, it's "opt in".