We've successfully updated some of our devices with the 2023 cert, and tested how PXE boot in SCCM would work. PXE boot worked fine when both 2011 and 2023 certs were enabled, which makes sense, and after revoking the 2011 cert, did not work, since the boot.wim doesn't contain the 2023 cert. A couple of questions:

Will the boot.wim naturally get the 2023 cert, if we keep SCCM/Windows SDK up-to-date?

Once we pass June 2026, will devices that didn't successfully get the 2023 cert yet still be able to PXE boot?

Will the 2011/2023 cert be able to live side-by-side in the boot.wim?