Is June 24, 2026 (the expiration date of the old KEK) a hard deadline?
After this date, will the procedure for deploying the new certificates to the DB and signing the boot manager with the new certificate no longer work?
Or will it still be possible after June 24 by using the registry entry together with running the scheduled task?