Forum Discussion
The Windows 11 Preview is prompting me to install a Secure Boot KEK update. Should I install it?
The system displayed a notification about a Secure Boot KEK update. What is this? Do I need to install it?
Windows has already installed the KEK CA 2023 cert. It just wants you to restart Windows, so it can take effect on the next reboot.
PC makers have two options for adding CA 2023 Secure Boot certs to your system: providing a BIOS update with new factory defaults for the Secure Boot certs, or sharing a signed KEK file with MS. Your OEM has chosen the second option, and Windows can now install all of the CA 2023 certs for you.