I'm experiencing some problems with Secure Boot on my system. It appears that my computer isn't utilizing the latest Secure Boot certifications. I've checked the certificates using a PowerShell command, and I can see the signatures, but I'm concerned about their validity. Additionally, the Event Viewer is reporting that a PK-signed Key Exchange Key (KEK) cannot be found for my device. I've got a Dell Latitude E5440, and it hasn't received a BIOS update since 2019. Is there any way to resolve these issues or update these certificates?
2 Answers
I'm curious, how did you come to notice that your Secure Boot isn't working properly? If everything seems to be functioning fine, it might not be worth stressing over. Often, issues are spotted through research rather than experiencing noticeable problems.
Have you updated your BIOS? New boot certificates usually come through BIOS updates. Sometimes it's better to just keep Secure Boot off if you’re not dealing with anti-cheat systems, as that's what I do. But if you're relying on Secure Boot for security, that might not be the best choice for you.

Related Questions
Can't Load PhpMyadmin On After Server Update
Redirect www to non-www in Apache Conf
How To Check If Your SSL Cert Is SHA 1
Windows TrackPad Gestures