Secure Boot Certificate expiration

Question

The security section on my laptop says that Secure Boot is on but the certificate has expired. How do I fix this?

Answer 1

Hii,

If the boot security certificates are updated via a Windows update, if the update is not performed it will probably be via a BIOS update on your laptop or desktop motherboard.

Initially

Search for msinfo32.exe in the search bar, take a screenshot, and post it here so you can see the correct laptop model or desktop configuration.

Open a PowerShell console and ensure that PowerShell is running as an administrator before running the following commands:

Set the registry key to Set-ItemProperty -Path “HKLM:\SYSTEM\CurrentControlSet\Control\SecureBoot” -Name “AvailableUpdates” -Value 0x40

Run the following scheduled task as Start-ScheduledTask -TaskName “\Microsoft\Windows\PI\Secure-Boot-Update”

Reboot the machine twice after running these commands to confirm that the machine is booting with the updated database.

To verify that the Secure Boot DB update was successful, open a PowerShell console and ensure that PowerShell is running as an administrator before running the following command:

[System.Text.Encoding]::ASCII.GetString((Get-SecureBootUEFI db).bytes) -match ‘Windows UEFI CA 2023’

Let me know if this is true or false

Thanks