Windows Boot Manager not updated

KB5025885 outlines how to update Windows Boot Manager, but build 26257 still has a Windows Boot Manager that is signed with the old "PCA 2011" certificate.   The manual processes in KB5025885 are a...