Next Secure Boot AMA: June 4 - Save the date!
The first set of tools and steps are now available to help you proactively update your Secure Boot certificates before they start expiring in June...
Updated May 29, 2026
Version 21.0
Blog Post
I had an Acer that was "High Confidence" but, was stuck in "in progress". I don't think Acer was/is planning to push a firmware update to this device. It's latest bios update was from 2021. After trying multiple times to do the scheduled task it remained in the same state. I then came across the following blog:
https://wenchy.net/2026/02/how-to-manually-install-the-latest-uefi-secure-boot-certificate-keys-for-windows/
I performed the steps except after running the script, and a few reboots things didn't change. I then ran the scheduled task again and performed two more reboots, all while ensuring BitLocker was paused. After the subsequent reboot, the status showed "Updated". I back tracked the information in the article to the Microsoft documentation.
FirmwareVersion : V1.10
OEMModelNumber : Spin SP513-54N
OEMModelSystemFamily : Spin 5
OEMName : Acer
OSArchitecture : AMD64
FirmwareReleaseDate : 03/15/2021
Is this a valid way to manually install the certificates in the event an OEM will not release a BIOS update and the 2023 certificate has been downloaded by Windows?