Poll Does your PC already have the new Secure Boot 2023 certificates, or do you still have the 2021 certificates?

[Sampei.Nihira]

What you need to know about the Secure Boot certificate expiration in Windows - Chipp.in Tech News and Reviews

My six-year-old PC is probably not among those that are highly compatible.
So I still have the 2021 certified Secure Boot.
In this registry key, you can check whether more data needed before Windows Update proceeds with the update:

Spoiler: Secure Boot Registry Key

 

[Jonny Quest]

Just checked my Windows 11 Surface 5 Laptop.

@Sampei.Nihira nice Spoiler edit

 

[ForgottenSeer 123960]

One of the many reasons I use a Chromebook as my personal device. Standard Secure Boot relies on a database of certificates (like those from Microsoft) that can sometimes expire or be revoked. Chromebooks use Hardware-Rooted Keys. The "root of trust" is baked into a read-only firmware chip, meaning the system doesn't need to check external certificate authorities to know if the software is safe.

 

[Sampei.Nihira]

Just checked my Windows 11 Surface 5 Laptop.

View attachment 296273

@Sampei.Nihira nice Spoiler edit

Hi,
You have verified that Secure Boot is enabled.
You should check whether you have Secure Boot certificates for 2021 or 2023.

 

[Jonny Quest]

Hi,
You have verified that Secure Boot is enabled.
You should check whether you have Secure Boot certificates for 2021 or 2023.

Still on 2021.

 

[lokamoka820]

My PC already has the new 2023 Secure Boot certificates installed.

Edit:

I have it installed according to the article.



However, the registry also displays what is displayed in your registry screenshot.

 

[silversurfer]

For interested users to check via PowerShell:

[System.Text.Encoding]::ASCII. GetString((Get-SecureBootUEFI db).bytes) -match 'Windows UEFI CA 2023'

Edit: seems already installed automatically Secure Boot 2023 certificates...

 

[Jonny Quest]

Still on 2021.

View attachment 296276

I just manually updated this laptop.

Here is what the registry looks like.

 

[devjitdutta2025]

I didn’t have it at first but the registry tweak worked for me. I now have it.

 

[Sorrento]

I already have it (and 2023 too)

 

[SeriousHoax]

My PC already has the new 2023 Secure Boot certificates installed.

Edit:

I have it installed according to the article.

View attachment 296278

However, the registry also displays what is displayed in your registry screenshot.

View attachment 296277

Mine is similar. I have 2023. Though not exactly the same as yours, for example my "WindowsUEFICA2023Capable" value is 2.

I think I will not do anything else manually. I'm gonna let Windows decide if something else needs to be done.

 

[Jonny Quest]

I just manually updated this laptop.

View attachment 296279

Here is what the registry looks like.

View attachment 296280

Sorry, I can't remember the link, I had about 3 tabs open, but it was suggested to have Fast Startup disabled, Bitlocker off, and do a couple restarts in a row to set the update. I'm not sure if turning Bitlocker off did anything (it was enabled when I did the manual update), or another restart finished it, but it now says CA2023Status Updated, and WindowsUEFICA is now on (2).

 

[lokamoka820]

You can also verify whether your computer has the latest secure boot by looking at Windows updates history.

 

[Morro]

My PC already has the new 2023 Secure Boot certificates installed.

Edit:

I have it installed according to the article.

View attachment 296278

However, the registry also displays what is displayed in your registry screenshot.

View attachment 296277

I have exactly the same as you.