Hello.

My Dell XPS 13 9360 will not have any BIOS updates that include the new certificates.

So, I tried to update it with the following commands:

from Admin CMD Prompt:
reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Secureboot /v AvailableUpdates /t REG_DWORD /d 0x5944 /f

from Admin Powershell:
Start-ScheduledTask -TaskName "\Microsoft\Windows\PI\Secure-Boot-Update"

This action updated all certificates in the DB except for the KEK CA 2K 2023, which I cannot update.

In the registry editor, UEFICA2023Status remains indefinitely in "progress" and shows no errors.

In "availableUpdates" the value is 0x5944.

Windows UEFICA2023capable shows 0x2.

I would like to know, since I only need to update the KEK CA 2K 2023 certificate, how I should proceed.

Thank you!