[Precision Tower 3620] 2023 Secure Boot KEK Missing

@Tesla1856​ The second article states "nor does it mean that these systems cannot get certificate updates from Windows Update". So pretty please?

I understand Dell doesn't want to release BIOS updates for older models, but they can sign new KEKs and I reckon that's way easier.

To add more info, the PC has accepted the db certs successfully and updated to the 2023 bootloader, but there is no KEK to replace the old one, so the PC won't be able to receive updates to the dbx.

I can't really speak for Dell, but I think you know the answer. You saw the long list of machines "they are supporting" for this, correct?

You might be interested in this. 

https://www.dell.com/community/en/conversations/optiplex-desktops/legacy-dell-pc-successful-windows-uefi-ca-2023-update/69d28a8eafab7825ebb77bf9?commentId=69fe3e522a10f520b36c6fe3

If so, we can work here quietly in your thread. If your skill level is high, I might be able to guide you the rest of the way. For starters, I would have to see the report.

@Tesla1856​ Thank you for this, though I probably won't go as hard as signing my own Secure Boot keys. I hope Dell provides Microsoft with an updated KEK.

Re:  Are there any plans from Dell to provide Microsoft with updated KEKs for this?

@Tesla1856 was spot on, Dell provides official list of which models will receive KEK updates and which are not.