XPS 16 9640 Secure Boot

Question

In June things expire involving secure Boot. Is Dell providing the needed certificates for this computer?

DELL-ChrisM2 · Answer

What BIOS version are you currently running?

Tomyb · Answer

@DELL-ChrisM2​  I just used Dell Support and the following occurred: Dell Dock WD19/WD22/HD22/WD25/SD25 Firmware Update Utility - 01.01.14.01 - 29.69 MB - Recommended - Installed Dell XPS 16 9640 System BIOS - 1.22.0 - 50.02 MB - Critical - Installed Intel Innovation Platform Framework and Provider Package Driver - A09 - 14.33 MB - Recommended - Installed Intel Arc Graphics Driver - A10 - 605.83 MB - Recommended - Installed Intel Rapid Storage Technology Driver and Application - A06 - 22.74 MB - Critical - Installed Intel Dynamic Tuning Driver - A07 - 51.62 MB - Recommended - Installed Realtek USB GBE Ethernet Controller Driver - A34 - 10.25 MB - Recommended - Installed But I still get the following under Device Security:

DELL-ChrisM2 · Answer

XPS 16 9640 BIOS 1.22.0 states = This BIOS contains the new 2023 Secure Boot Certificates.

Conjecture = I do not see anything else from Dell that needs to be updated. Perhaps Windows Updates has to run several times to fix this?

anne_droid · Answer

Hi

Not that it matters, but most of what follows is true.....

From BIOS version 1.17.0 DELL BIOS's seem to have the 2023 certs available, as does the more current 1.22.0 as stated by @DELL-ChrisM2

XPS_9640_1.22.0.exe File size 50.02 MB

Description

This package contains the Dell system BIOS update. BIOS is a firmware package that is embedded on a small memory chip on the system board. It controls the keyboard, monitor, disk drives, and other devices. This update addresses the Dell Security Advisories (DSA). A security advisory is a statement when a security vulnerability impacts a product, and a remedy is available for the vulnerability.

Important Information

- This BIOS contains the new 2023 Secure Boot Certificates.

###############

If Windows shows a warning

Checkmsinfo32and confirmSecure Boot State = On. Microsoft says that state is the key first check.
If the warning persists after the BIOS update, reboot once or twice more; some systems do not clear the Windows security warning immediately after the certificate change.
If BitLocker is enabled, suspend it before BIOS/Secure Boot changes and make sure you have the recovery key. That avoids recovery prompts during the firmware update flow.

For your specific model

The Dell support article includesXPS 16 9640in the list of platforms that receive the new certificates, with minimum BIOS1.17.0. If you are already on that BIOS or newer and the machine is fully patched, the certificate rollover should be handled automatically by Dell firmware and/or Windows Update.

Practical sequence

Back up important data.
Save your BitLocker recovery key and suspend BitLocker.
Update Windows.
Install the latest XPS 16 9640 BIOS from Dell.
Reboot, confirm Secure Boot is still On, then check whether the warning has cleared.

I am sure all will be well.

XPS