Forum Discussion

GageWilder's avatar
GageWilder
Iron Contributor
Mar 13, 2026

Windows11 Prompts "Secure Boot KEK Update" Should I Install It?

The system showed a "Secure Boot KEK update" notification. What is this, and is it necessary to install?

 

1 Reply

  • Charlie34000's avatar
    Charlie34000
    MCT
    Mar 14, 2026

    Hi,

    A “Secure Boot KEK Update” is an official update to the Secure Boot key database (the Key Exchange Key).

    These updates are published by Microsoft to keep the Secure Boot trust chain current and ensure that firmware can validate signed components correctly.

     

    This type of update is legitimate and safe to install. It helps maintain the integrity of Secure Boot on your device and is delivered through Windows Update for all supported systems.