I'm having trouble with secure boot on my system. It seems like my machine isn't using the latest secure boot certifications. I ran a PowerShell command to check the certificates, and here's what I found:
- Thumbprint: 580A6F4CC4E4B669B9EBDC1B2B3E087B80D0678D - Subject: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation
- Thumbprint: 46DEF63B5CE61CF8BA0DE2E6639C1019D0ED14F3 - Subject: CN=Microsoft Corporation UEFI CA 2011, O=Microsoft Corporation
- Thumbprint: 45A0FA32604773C82433C3B7D59E7466B3AC0C67 - Subject: CN=Windows UEFI CA 2023, O=Microsoft Corporation
- Thumbprint: 3FB39E2B8BD183BF9E4594E72183CA60AFCD4277 - Subject: CN=Microsoft Option ROM UEFI CA 2023, O=Microsoft Corporation
- Thumbprint: B5EEB4A6706048073F0ED296E7F580A790B59EAA - Subject: CN=Microsoft UEFI CA 2023, O=Microsoft Corporation
Additionally, my event viewer shows an error stating that a PK-signed Key Exchange Key cannot be found for the device. I've checked my device signature information, and it's from Dell Inc., with the latest firmware version A24 but it seems like there's no resolution available. Any advice on how to address this issue?
2 Answers
How did you even notice this issue? Is it causing any specific problems, or are you just seeking info without doing some initial research? Sometimes asking can be helpful, but it’s good to have a bit of a background on your issue.
Have you checked for BIOS updates? New boot certificates come through BIOS updates, and that might fix your issue. Just a heads up, I usually keep secure boot off because it can lead to more problems than it solves, but that’s just my experience.
Related Questions
Can't Load PhpMyadmin On After Server Update
Redirect www to non-www in Apache Conf
How To Check If Your SSL Cert Is SHA 1
Windows TrackPad Gestures