1 Rookie
•
38 Posts
0
162
November 17th, 2025 21:23
XPS 8930, UEFI CA 2023 update?
Problem Description:
There is a warning from Microsoft about the UEFI CA 2011 expiring next June and an update for UEFI CA 2023. I need to know if there is a new BIOS that supports the new certificate and what I need to do to get this update for CA 2023 installed and working before the CA 2011 expires. The current BIOS installed on this XPS 8930 is 1.1.31 dated 2023-11-21. I'm running Windows 11 Build 26200.7171. Is there any information on the procedure to get this update in place and working on the Dell XPS 8930? Please advise on what needs to be done.
Thanks
F.G.
No Events found!



fgg2009
1 Rookie
•
38 Posts
0
December 19th, 2025 07:30
@DELL-ChrisM2
Given that DELL was not providing the new CA 2023 certificate for this DELL XPS 8930,
I solved the problem by manually adding "microsoft corporation kek 2k ca 2023.crt" to the BIOS 1.1.31.
Now I have the CA 2023 certificate installed and updated ready for June 2026 when the CA 2011 will be revoked. 🤞
Secure Boot: ON
BitLocker on (C:) OFF
UEFI KEK Certs
--------------
Microsoft Corporation KEK CA 2011
Microsoft Corporation KEK 2K CA 2023
UEFI DB Certs
-------------
Microsoft Corporation UEFI CA 2011
Microsoft Windows Production PCA 2011
Microsoft Option ROM UEFI CA 2023
Microsoft UEFI CA 2023
Windows UEFI CA 2023
UEFI DBX Certs
--------------
Microsoft Windows PCA 2010
EFI Files
---------
Disk 3: Boot Manager [Windows UEFI CA 2023] is ALLOWED.
Registry: UEFICA2023Status = Updated
[UEFI CA 2023 Status] Updated.
Registry: WindowsUEFICA2023Capable = 2
[Windows UEFI CA 2023] is in UEFI DB, and Windows is starting from CA 2023 Boot Manager.
(edited)
DELL-ChrisM2
Community Manager
•
818 Posts
0
November 18th, 2025 17:59
Given that it is an 8 year old 2017 released end of life model and that the last BIOS released was December 2023 only for Dell Security Advisory, very doubtful.
fgg2009
1 Rookie
•
38 Posts
0
November 18th, 2025 18:24
@DELL-ChrisM2
That is not what I needed to hear.
fgg2009
1 Rookie
•
38 Posts
0
November 19th, 2025 03:39
BIOS installed on this XPS 8930 is 1.1.31 dated 2023-11-21. It should support UEFI CA 2023 updates.
If not, Dell needs to get a fix for it. 🤬
garioch7
5 Practitioner
•
302 Posts
0
December 20th, 2025 18:04
@DELL-ChrisM2 ,
I too own a Dell XPS 8930 SE, purchased from Dell on 2019-10-18, at considerable cost because I outfitted it for HD video editing. I also own a Dell XPS 15 7590, purchased from Dell on 2020-05-27. Both computers are working flawlessly, and they have since purchase.
<To protect you, your private information was removed from public view. All private data was saved to your private Case. DELL-Admin>
Is Dell seriously going to abandon its customers?
AT THE VERY LEAST, Dell customers need a step-by-step guide as to how to update the BIOS to avoid 2026 obsolescence.
Personally, I am very disappointed with this news from Dell. Would you confirm that this decision by Dell is irrevocable?
If so, my next computers will not be Dells, nor will I ever recommend Dell computers again, and I have been the agent who has guided my computer support clients to purchase Dell computers.
Thank you for your attention to his post. Have a great day.
Regards,
Phil
(edited)
fgg2009
1 Rookie
•
38 Posts
0
December 20th, 2025 19:11
@garioch7
I feel the same way here.
XPS 8930 was pretty expensive, Dell should support it and add the update or at least explain exactly how to get the new CA 2023 Certificate before June 2026.
DELL-ChrisM2
Community Manager
•
818 Posts
0
December 20th, 2025 22:59
I am not a platform team engineer. I am only a Forum Liaison. All I can do is make them aware of the thread. Typically, BIOS updates to correct a systemic hardware or software issue are done until they deem the PC model is end of life. Generally that is 3 to 5 years from the original release to market sale date. From that point on I have only seen Dell Security Advisory BIOS updates released.
garioch7
5 Practitioner
•
302 Posts
2
December 21st, 2025 17:26
@DELL-ChrisM2 ,
Thank you for your reply, and I do appreciate that you will bring this topic to the attention of the Dell Platform Engineers.
I think your "Platform Team Engineers" need to rethink their support cycle. I routinely keep my PCs for 8 to 10 years. I purchase my computers, with a view to keeping them that long, and thus "future-proofing" them to the extent I can at the time of purchase. As a retired person, living on a half-pension after a divorce, I can't be shelling out thousands of dollars every five years.
And why would most people discard a perfectly good computer after only five years, if it is still working? I don't need or want the "latest and greatest." I want a good, solid computer that performs well. Both of my Dell computers are running just great, and are in excess of five years old, as I documented in my original post in this topic.
I believe Dell should be corporately responsible for ensuring that their computers are supported for far longer than an arbitrary five-year support term. That policy implies that Dell expects their computers to fail after five years; and/or, Dell wants to sell more computers. I respectfully submit that the customer's requirements are not being considered.
That, to me, is very shortsighted. If Dell computers have to be discarded after five years, then existing customers will look to other manufacturers when they must discard their Dell computers.
I had a Maingear computer years ago that served me for eleven years. During all that time, Maingear provided telephone and software support for that computer under their FREE "Angelic Warranty." It was the best computer I ever owned. There were no proprietary parts, so it was easy to replace or upgrade components.
Since then, Maingear has veered off into gaming computers, which don't interest me. That combined with the fact that Maingear is a US company, the exchange rate for the Canadian dollar made their computers prohibitively expensive. So I returned to Dell computers, with which I have been very happy over the years, except for all of the proprietary parts used in newer Dell computers over the last few years, and the massive amount of bloatware preinstalled by Dell.
I have learned that you have to order what you want WHEN you purchase a Dell computer. Future computer hardware upgrades after purchase are fraught with difficulties for the Dell customer.
If Dell persists with not dealing with the Certificate Issue for older, but fully-functional Dell computers, I predict Dell will lose a lot of customers, me included, and give itself a corporate black eye!
Have a great day.
Regards,
Phil
fgg2009
1 Rookie
•
38 Posts
0
December 22nd, 2025 01:27
In case anybody needs it, this is the link to download the CA 2023 certificate from Microsoft.
https://go.microsoft.com/fwlink/p/?linkid=2239775
GaryK30
1 Rookie
•
4 Posts
0
February 3rd, 2026 23:20
@fgg2009
I also have an XPS 8930 with BIOS 1.1.31. Windows doesn't seem to be able to update the 2023 Secure Boot certificates in the BIOS on its own.
How did you manually add the 2023 Secure Boot certificates to the BIOS?
How did you generate the output in your post verifying the addition of the 2023 Secure Boot certificates?
Does Windows show that the 2023 Secure Boot certificates are present in the Active DB and the Default DB on your system? There are PowerShell scripts to determine this. There is also a registry entry (for which you show the status is your post) and an Event Viewer System Log entry that pertain to the 2023 Secure Boot certificates.
Thanks,
Gary
(edited)
fgg2009
1 Rookie
•
38 Posts
0
February 4th, 2026 05:56
@GaryK30
I added the certificate to the BIOS manually, downloaded the file from the link below and save it on a USB drive formatted FAT32 and then imported on the XPS 8930 BIOS.
https://go.microsoft.com/fwlink/p/?linkid=2239775
I think I found a procedure on the web on how to import the file below into the BIOS.
"microsoft corporation KEK 2k CA 2023.crt"
I don't remember the details you may search the web for a procedure.
How to manually import "microsoft corporation KEK 2k CA 2023.crt" to a DELL XPS 8930 BIOS.? - Google Search
fgg2009
1 Rookie
•
38 Posts
0
February 4th, 2026 06:36
@GaryK30
I replied earlier, but looks like my reply disappeared from this thread.
Here it is again.
I added the certificate to the BIOS manually, downloaded the file from the link below and save it on a USB drive formatted FAT32 and then imported on the XPS 8930 BIOS.
https://go.microsoft.com/fwlink/p/?linkid=2239775
I think I found a procedure on the web on how to import the file below into the BIOS.
"microsoft corporation KEK 2k CA 2023.crt"
I don't remember the details, you may search the web for a procedure.
How to manually import "microsoft corporation KEK 2k CA 2023.crt" to a DELL XPS 8930 BIOS.? - Google Search
The scripts related to the CA2023 certificate updates are on elevenforum and/or github.
Good luck!