Hi

Not that it matters, but most of what follows is true.

I have seen several posts about the Secure Boot Certs 2023 being flagged up as missing.

Dell, I believe, has several to many BIOS upgrades that resolve the issue.

I don't have an issue.

PS C:\> ([System.Text.Encoding]::ASCII.GetString((Get-SecureBootUEFI db).bytes) -match 'Windows UEFI CA 2023')
True

Checking Secure Boot Certificates
To verify if your Secure Boot certificates are updated, you can use PowerShell on your Windows PC. Follow these steps:

Step 1: Open PowerShell
Press Windows + X and select Windows PowerShell (Admin) to run it as an administrator.
Step 2: Run the Command
Enter the following command in PowerShell:
powershell

([System.Text.Encoding]::ASCII.GetString((Get-SecureBootUEFI db).bytes) -match 'Windows UEFI CA 2023')

Step 3: Interpret the Result (my result is below)...

Windows PowerShell
Copyright (C) Microsoft Corporation. All rights reserved.

Install the latest PowerShell for new features and improvements! https://aka.ms/PSWindows

If the command returns True, your Secure Boot certificates are updated to the 2023 version.
If it returns False, your system is still using the older certificates, which are set to expire in June 2026.

Additional Steps if Certificates are Not Updated
If your certificates are not updated, consider the following actions:

Update Windows
Open Settings > Update & Security > Windows Update and check for updates. Install any pending updates.
Check OEM Firmware Updates

NB: You may need to add further steps to the process, double check with your Manufacturer.
EG: BitLocker Key (consider de-crypting your data) and Backups before making any changes.

Visit your PC manufacturer's support site (e.g., Dell, HP, Lenovo) to see if there are firmware updates available for your specific model.

Manual Registry Method

If updates do not resolve the issue, you may need to manually update the registry.

Use the following command in PowerShell:

powershell

reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Secureboot /v AvailableUpdates /t REG_DWORD /d 0x40 /f

After running this command, restart your PC and check the certificates again.

By following these steps, you can ensure that your Secure Boot certificates are current and your system remains secure.

Pinned Posts

DDPM issues, how to report them to Dell

Windows General

snipping tool is not working

Windows 11 Lite installation

Secure Boot 2023 Cert upgrade.

Windows Server 2022 COA sticker replacement

Is the camomile program safe, and does it actually reduce heat safely?

Moving from Optiplex 3020 to Optiplex 7070 with Acronis Universal Restore?

Intel Graphics Driver is Crashing Computers

Blue screen

Dell Command Update Installation Error

Support assist os recover

unauthorized app on computer

KillerNetworkManagerLauncher popup on every boot — complete fix when standard uninstall fails

Why do some websites load slower on Dell laptops compared to others?

Delete items in C:\ProgramData\Dell\drivers

SW\{97ebaacc-95bd-11d0-a3ea-00a0c9223196}

Latest Solutions

Windows 11 keeps asking for username/password — how can I remove this?

Updating to Dell Command|Update v5.7.1

My dell laptop get freezed while i working

pdf reader for Windows 7?

DDPM 2.3.0.9 and Windows Startup

Dell Support Resources