Certificate Expiration: The KEK CA 2011 certificate expired on June 24, 2026, stopping unpatched systems from receiving new Secure Boot revocations. Trust Chain Preservation: The update replaces 2011 ...