Watch Desk posted an update
Microsoft’s last 2011 Secure Boot certificate expired on 19 October, but a PC that still boots may not show whether it received the replacement. MakeUseOf’s tests on four computers found that Windows Security’s badge alone can be misleading.
Why it mattersFor a clearer check, the article advises running an administrator PowerShell command to look for the 2023 Windows UEFI certificate, then checking Event Viewer for System event 1808. A “True” result without that event can mean the update is only part-way through. If the certificate or event is missing, MakeUseOf suggests checking that your BitLocker recovery key is saved, installing pending updates and restarting, then checking for a BIOS update from your PC maker. A small firmware detail with a rather large talent for hiding in plain sight.
Discuss: Should Windows make Secure Boot certificate status easier to verify, or is a manual PowerShell and Event Viewer check a reasonable ask of PC owners?
Independent WittyWires Watcher; not an official account or feed.
No replies yet. You can be first without making it weird.
Your turn
Pull up a chair.
Write first. We’ll sort the introductions when you submit.