Update Secure Boot certificate

Question

I have an older Dell XPS laptop running Windows 10 and has the most recent BIOS installed.. I have extended security and installed all the available Windows updates. Still I have the Secure Boot 2011 certificate. How do I install the most recent Secure Boot 2013 certificate?

Answer 1

Refer to https://www.dell.com/support/kbdoc/en-us/000378734/microsoft-2011-secure-boot-certificates-expiration-for-out-of-scope-platforms-for-bios-updates

If your system shipped before 2020, or it is in the following list, there is no plan for BIOS updates with the 2023 certificates included.

Note: This does not mean that these systems will not boot after June 2026 nor does it mean that these systems cannot get certificate updates from Windows Update. You should not reset the Secure Boot Certificates if they are updated by Windows Update as the BIOS cannot restore the new certificates.

---

If the above response helps answer your question, remember to "Accept Answer" so that others in the community facing similar issues can easily find the solution. Your contribution is highly appreciated.

hth

Marcin

Answer 2

Hi,

I can understand that it might be concerning for you since it is an older device.

The list of XPS devices that are unsupported is here, if your device isn't in the list, an update might come soon.

https://www.dell.com/support/kbdoc/en-us/000378734/microsoft-2011-secure-boot-certificates-expiration-for-out-of-scope-platforms-for-bios-updates#XPS

I know this isn't an ideal answer, but I am afraid it is the discretion of Dell to provide or not to provide a certificate update for your device.

I’m eager to hear back and work together to find a solution.

Standard 3rd party link disclaimer:

There may be links to non-Microsoft websites that provide accurate and safe information. Watch out for ads on websites frequently classified as PUP (Potentially Unwanted Products). There is no need to buy paid products to fix your computers, as they sometimes do more harm than good.