As can be seen from the below screenshot, which is from my PC, my system is booting from Windows UEFI CA 2023 certificate and Microsoft Windows Production PCA 2011 is not allowed because I put it under DBX list.
Then I searched for ways to place certificates "Microsoft Corporation KEK CA 2011" and "Microsoft Corporation UEFI CA 2011", indicated by red arrows in below screenshot, under the DBX list but I couldn't do it.
After reading several articles on the subject, I came to the understanding that these old certificates will be revoked automatically by Microsoft some time in or after June 2026 and my system will be left solely on CA 2023 certificates.
Question
MOoD90s 0
As can be seen from the below screenshot, which is from my PC, my system is booting from Windows UEFI CA 2023 certificate and Microsoft Windows Production PCA 2011 is not allowed because I put it under DBX list.
Then I searched for ways to place certificates "Microsoft Corporation KEK CA 2011" and "Microsoft Corporation UEFI CA 2011", indicated by red arrows in below screenshot, under the DBX list but I couldn't do it.
After reading several articles on the subject, I came to the understanding that these old certificates will be revoked automatically by Microsoft some time in or after June 2026 and my system will be left solely on CA 2023 certificates.
I hope my understanding is correct.
Have a nice weekend.
Link to comment
Share on other sites
0 answers to this question
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.