The Key Exchange Key (KEK) acts as an authority that allows Microsoft to update the other databases, like the DB and DBX that tell your computer which bootloaders are safe.

Microsoft is taking its time with the boot certificate rollout, but you don't have to. Activate the latest UEFI CA 2023 right now.

Updated firmware trust chains strengthen rootkit protection and zero-trust infrastructure security.

Microsoft this week offered guidance to address a Secure Boot vulnerability in Windows and Linux systems, but it'll likely be a long-term project for IT pros. The issue was identified by Microsoft in ...

Microsoft's Secure Boot certificates expire in June and need to be replaced. Microsoft provides a guide for server admins.

In this post, we will show you how to disable Secure Boot in Hyper-V and what to do if Hyper-V is not booting when Secure Boot is enabled. If you’re running a Generation 2 virtual machine in Hyper-V ...

Secure Boot is one of the requirements for Windows 11. You cannot install Windows 11 until you enable Secure Boot in your BIOS. However, there are ways by which you ...

Update 1/22/23: Title updated as MSI intentionally changed this setting as per statement below. Over 290 MSI motherboards are reportedly affected by an insecure default UEFI Secure Boot setting ...

TL;DR: Steam's latest beta adds native detection for Secure Boot and TPM 2.0, helping gamers verify if their PCs meet new hardware security requirements for modern AAA games like Battlefield 6 and ...

Why it matters: Secure Boot is a technology designed to protect the PC boot chain and avoid running a tampered operating system. A firmware update released by MSI, however, changed the feature ...

The Secure Boot security mechanism of the Unified Extensible Firmware Interface (UEFI) can be bypassed on around half of computers that have the feature enabled in order to install bootkits, according ...