On machines that have either Secure Boot disabled or already have 2023 certs, it got swapped when they installed Febuary 2026 LCU.

In other cases when the certs get applied by High Confidence or registry settings after that, the boot manager will get swapped after the next reboot after successful installation of the certificates.