Event details
I have some models where the DB and DBx update succeeds, but the KEK fails (gives a specific Access Denied, which can be resolved with booting into the BIOS itself).
Is there any issue in not having the KEK updated?
You won't receive any future DBX updates if the KEK is not updated.
But maybe the vendor will still submit a signed KEK update or a firmware update for your device so it can be updated automatically in the future. If not, you'd probably need to apply it manually in the UEFI setup.
