Microsoft has recently begun replacing expiring Secure Boot certificates on eligible Windows 11 systems running 24H2 and 25H2 ...
You mightn't think it, but the Windows 11 Recovery Environment is genuinely powerful.
Microsoft confirms systems without updated Secure Boot certificates will boot normally but lose some security protections.