XPS 8950, Secure Boot Certificate update

I have a Dell XPS 8950 just updated to BIOS 1.26 (dated may 2025). I need to know if the Dell BIOS will get the updates Secure Boot Certificates installed or if Windows has to install it through Windows Updates? I know the BIOS is made AMI. The current certificates are set to expire next summer. Please advise how this will work. Thank you