Dell Optiplex 3060 Secure Boot Certification

Hi

Hope this helps.

https://www.dell.com/community/en/conversations/windows-general/secure-boot-2023-cert-upgrade/6a187f63a3bee005f7656895

I had Secure Boot shown as disabled in Windows System Information. This worked:

1. Entered BIOS Setup and Disabled Secure Boot. Saved, Exited, and rebooted.

2. Re-entered BIOS Setup and Enabled Secure Boot. Saved, Exited, and rebooted.

Secure Boot was then shown as enabled in Windows System Information.

I don't think anyone having problem with their secure boot certificates because the older one, 2011 certificates are still active and have not been revoked yet.  There is no widespread problem to fix.

I guess you may have tinkered with your system BIOS, possibly Enable/Disable and reset the Custom Key settings.  That could lead to mismatching the bootloader's digital signature in firmware with the approved certificates on your operating system.

Although Dell did not provide new BIOS firmware with 2023 secure boot certificates, Microsoft should have updated your system with the new 2023 certificates by now through Secure Boot Allowed Key Exchanged Key (KEK) Update. 

Without any information provided or event leading to your system issue, I suggest that you prep the BIOS firmware to BIOS default and performing a clean Windows installation.  Replace a new coin cell battery as a maintenance task to avoid future BIOS reset after NVRAM receive new certificates. 

1. Hi, do you guys have any problems this month with Secure Boot certification?

2. My PC gets blocked from booting if I enable Secure Boot. 

1. No

2. Sounds bad. Might be SecureBoot doing it real-job (there are currently 431 Forbidden Signatures).

I see an easy fix below (I've also seen something like this once ... it gets confused somehow).

But @Chino de Oro posted the more comprehensive procedure if required.

@Chino de Oro​ ,

 because the older one, 2011 certificates are still active and have not been revoked yet. 

Yes, I noticed that as well.

And on May 29, 2026 according to Microsoft's Security Center status-report ... they are fine with that and everything is cool.

I had the same issue yesterday, with Optiplex 7010 Micro i5-13gen from my other post talking about other issue + now this issue too (for anyone who's in same problematic situation):
‎Optiplex 7010 i5-13gen problems with any USB device plugged to it | Page 3 | DELL Technologies

Yesterday I had a very weird issue with Secure Boot thing during installation of Windows 11. Apparently during reinstalling system from the beginning through Media Creation Tool (usb flash drive), everything went right until reboot after 100% installation of Windows (the blue screen thing). It appeared on the PC that there's no bootable device nor system on PC nor even letting me reinstall system again. Ended up I had to check and change settings in Secure Boot in BIOS to let it work again. I don't know why it happened. On the other hand I realised that turning off the option "RAID Intel RST (IRST)" thing in BIOS allowed me to reinstall system without seeking the driver for NVME hard drive for allowing reinstalling system. I don't know yet but I'm gonna also test if it'll fix the issue that I constantly had bluetooth/usb dongle interruptions along with any usb flash drive/sd card/pendrive plugged in. Sometimes PC tended to just not connect the device to it, sometimes PC decided to remove all data from it, or setting it RAW partition or just breaking it in any possible way.

Anyways, today is a good day to test it as I was fixing system late evening yesterday. Thumbs up that finally issues will be resolved maybe? I wanted everyone who has this issue, to know that there's this little option that helps to recover your PC from this weird issue. So far I did read on Dell Optiplex site that someone had this issue with no bootable device like 2 weeks ago and that was the solution. So far the issue with no bootable device appeared on two PCs from my side and they are different brands and different processors. So, anyways, I hope people will comment on this post and we'll figure out what could have been the cause of these issues and if it's really a solution what I did or it's just temporary fix? I suspect some kind of update that caused it but it's so weird that earlier few months ago everything was all right with reinstalling system from the same USB flash drive without changing anything in BIOS.