The Key Exchange Key (KEK) acts as an authority that allows Microsoft to update the other databases, like the DB and DBX that tell your computer which bootloaders are safe.

Microsoft is taking its time with the boot certificate rollout, but you don't have to. Activate the latest UEFI CA 2023 right now.

In June 2025, Microsoft announced that, in June 2026, it would begin deprecating Secure Boot certificates of Windows systems ...

In brief: Secure Boot was originally introduced with Windows 8 as a firmware-based security feature designed to protect the OS from potentially malicious boot code. After more than 15 years, the ...

Updated firmware trust chains strengthen rootkit protection and zero-trust infrastructure security.

Microsoft's Secure Boot certificates expire in June and need to be replaced. Microsoft provides a guide for server admins.

Microsoft is issuing new Secure Boot certificates to Windows PC users, as the initial certificates are reaching the end of a planned lifespan after 15 years and are set to expire in June 2026. The ...

Microsoft on Monday released a Secure Boot update ahead of the expiry of a root certificate first issued in 2011, warning ...

As a good PC user, I run security software in Windows to protect my computer from malware that may pop up as I go about my day. But what about malware that tries to launch before Windows even loads?

Facepalm: Microsoft and the PC industry developed the Secure Boot protocol to prevent modern UEFI-based computers from being hacked or compromised during the boot process. However, just a few years ...

The February Windows update preview is extensive. It includes new Secure Boot certificates and app and settings backups.

So... my Asus mobo (ROG Strix Z390-E Gaming) is from 2018, and while the code Andrew provided for PowerShell shows I'm OK for the new cert, I get "False" for Default ...