XPS 8930, UEFI CA 2023 update?

Question

Problem Description:    There is a warning from Microsoft about the UEFI CA 2011 expiring next June and an update for UEFI CA 2023. I need to know if there is a new BIOS that supports the new certificate and what I need to do to get this update for CA 2023 installed and working before the CA 2011 expires. The current BIOS installed on this XPS 8930 is 1.1.31 dated 2023-11-21. I'm running Windows 11 Build 26200.7171. Is there any information on the procedure to get this update in place and working on the Dell XPS 8930? Please advise on what needs to be done. Thanks F.G.

fgg2009 · Accepted Answer

@DELL-ChrisM2​  Given that DELL was not providing the new CA 2023 certificate for this DELL XPS 8930, I solved the problem by manually adding 'microsoft corporation kek 2k ca 2023.crt' to the BIOS 1.1.31. Now I have the CA 2023 certificate installed and updated ready for June 2026 when the CA 2011 will be revoked. 🤞 Secure Boot: ONBitLocker on (C:) OFF UEFI KEK Certs--------------    Microsoft Corporation KEK CA 2011    Microsoft Corporation KEK 2K CA 2023 UEFI DB Certs-------------    Microsoft Corporation UEFI CA 2011    Microsoft Windows Production PCA 2011    Microsoft Option ROM UEFI CA 2023    Microsoft UEFI CA 2023    Windows UEFI CA 2023 UEFI DBX Certs--------------    Microsoft Windows PCA 2010 EFI Files---------    Disk 3: Boot Manager [Windows UEFI CA 2023] is ALLOWED.     Registry: UEFICA2023Status = Updated        [UEFI CA 2023 Status] Updated.     Registry: WindowsUEFICA2023Capable = 2        [Windows UEFI CA 2023] is in UEFI DB, and Windows is starting from CA 2023 Boot Manager.

DELL-ChrisM2 · Answer

Given that it is an 8 year old 2017 released end of life model and that the last BIOS released was December 2023 only for Dell Security Advisory, very doubtful.

fgg2009 · Answer

@DELL-ChrisM2​  That is not what I needed to hear.

fgg2009 · Answer

BIOS installed on this XPS 8930 is 1.1.31 dated 2023-11-21. It should support UEFI CA 2023 updates. If not, Dell needs to get a fix for it. 🤬

garioch7 · Answer

@DELL-ChrisM2 , I too own a Dell XPS 8930 SE, purchased from Dell on 2019-10-18, at considerable cost because I outfitted it for HD video editing.  I also own a Dell XPS 15 7590, purchased from Dell on 2020-05-27.  Both computers are working flawlessly, and they have since purchase. <To protect you, your private information was removed from public view. All private data was saved to your private Case. DELL-Admin> Is Dell seriously going to abandon its customers? AT THE VERY LEAST, Dell customers need a step-by-step guide as to how to update the BIOS to avoid 2026 obsolescence. Personally, I am very disappointed with this news from Dell.  Would you confirm that this decision by Dell is irrevocable? If so, my next computers will not be Dells, nor will I ever recommend Dell computers again, and I have been the agent who has guided my computer support clients to purchase Dell computers. Thank you for your attention to his post.  Have a great day. Regards, Phil

fgg2009 · Answer

@garioch7​  I feel the same way here. XPS 8930 was pretty expensive, Dell should support it and add the update or at least explain exactly how to get the new CA 2023 Certificate before June 2026.

DELL-ChrisM2 · Answer

I am not a platform team engineer. I am only a Forum Liaison. All I can do is make them aware of the thread. Typically, BIOS updates to correct a systemic hardware or software issue are done until they deem the PC model is end of life. Generally that is 3 to 5 years from the original release to market sale date. From that point on I have only seen Dell Security Advisory BIOS updates released.

garioch7 · Answer

@DELL-ChrisM2 , Thank you for your reply, and I do appreciate that you will bring this topic to the attention of the Dell Platform Engineers. I think your 'Platform Team Engineers' need to rethink their support cycle.  I routinely keep my PCs for 8 to 10 years.  I purchase my computers, with a view to keeping them that long, and thus 'future-proofing' them to the extent I can at the time of purchase.  As a retired person, living on a half-pension after a divorce, I can't be shelling out thousands of dollars every five years. And why would most people discard a perfectly good computer after only five years, if it is still working?  I don't need or want the 'latest and greatest.'  I want a good, solid computer that performs well.  Both of my Dell computers are running just great, and are in excess of five years old, as I documented in my original post in this topic. I believe Dell should be corporately responsible for ensuring that their computers are supported for far longer than an arbitrary five-year support term.  That policy implies that Dell expects their computers to fail after five years; and/or, Dell wants to sell more computers.  I respectfully submit that the customer's requirements are not being considered. That, to me, is very shortsighted.  If Dell computers have to be discarded after five years, then existing customers will look to other manufacturers when they must discard their Dell computers. I had a Maingear computer years ago that served me for eleven years.  During all that time, Maingear provided telephone and software support for that computer under their FREE 'Angelic Warranty.'  It was the best computer I ever owned.  There were no proprietary parts, so it was easy to replace or upgrade components. Since then, Maingear has veered off into gaming computers, which don't interest me.  That combined with the fact that Maingear is a US company, the exchange rate for the Canadian dollar made their computers prohibitively expensive.  So I returned to Dell computers, with which I have been very happy over the years, except for all of the proprietary parts used in newer Dell computers over the last few years, and the massive amount of bloatware preinstalled by Dell. I have learned that you have to order what you want WHEN you purchase a Dell computer.  Future computer hardware upgrades after purchase are fraught with difficulties for the Dell customer. If Dell persists with not dealing with the Certificate Issue for older, but fully-functional Dell computers, I predict Dell will lose a lot of customers, me included, and give itself a corporate black eye! Have a great day. Regards, Phil

fgg2009 · Answer

In case anybody needs it, this is the link to download the CA 2023 certificate from Microsoft. https://go.microsoft.com/fwlink/p/?linkid=2239775

ducatimatt10

About me

ducatimatt10's Activities

Engagement Stats

Member Stats