I'm having some confusion about the status of my Secure Boot certificates on Windows. After the April update, the security settings page indicates that "Secure Boot is on, but using an older boot trust configuration that should be updated. There's not enough data to classify your device for automatic update." However, when I run a check in PowerShell, it shows "True" saying the certificates are installed. What should I do to ensure my Secure Boot certificates are current? I'm running Windows 11 Pro, OS Build no. 26200.8246, on an ASUS TUF X670E Plus WiFi motherboard, which I've updated to the latest BIOS available, version 3842 from March 17, 2026.
2 Answers
It sounds like you're catching some mixed signals for sure. First, it's essential to back up your data before making any significant changes just in case something goes awry with the BIOS settings or disk configuration. A good place to start is checking out the [GitHub guide](https://github.com/cjee21/Check-UEFISecureBootVariables) linked earlier. It offers some insights into Secure Boot settings that might help clarify things for you.
Make sure that your BIOS is indeed set correctly for Secure Boot. Since you recently updated it and switched it to "Windows UEFI" from "Other OS," you're on the right track. Just double-check everything is saved and that you're set to only allow Windows UEFI mode. Also, if you’ve verified that your certificates are installed in PowerShell, it might just be that the system is a bit behind on its notices!
Related Questions
Can't Load PhpMyadmin On After Server Update
Redirect www to non-www in Apache Conf
How To Check If Your SSL Cert Is SHA 1
Windows TrackPad Gestures