Secure Boot Certs

[eyebrowz]

Hi

I appear to have Secure Boot Certs for Microsoft beyond June 2026.

HOW2 be absolutely certain I have them, and enrol them if I dont.

Circa 2025 Vivobook X1704V

I can find Canonical and GrUB listings, but no Microsoft.

I am sure this is, or will be, a concern for many people.

[Falcon_ASUS]

@eyebrowz 
The following information is provided for your reference.
Windows Secure Boot certificate expiration and certificates updates
Thank you.

[eyebrowz]

Hi

Thank you for the response.

I found it too generic, and not addressing my concerns...

##################################

Checking for Microsoft 2011 Secure Boot certificate...

Microsoft certificate: NOT PRESENT

Checking for Microsoft 2023 Secure Boot certificate...

Microsoft 2023 certificate: NOT PRESENT

Secure Boot Status: enabled

Microsoft Certificate Status:
- Microsoft Certificate Present: false
- 2023 Certificate Present: false
- 2011 Certificate Present: false

ACTION ITEMS:
=============
[WARNING] No Microsoft certificates found - consider enrolling them

Audit completed: 2026-06-01 15:10:32 BST

################################

I generated a script and ran it, the last few lines are listed above.

I would really like to be able to inspect and enrol the appropriate certs into my W11 installation.

Because I have Canonical and GrUB certs this laptop will continue to be used, it is the Microsoft certs I would like to see listed.  I ran updates several times yesterday, but still no improvement.

[Falcon_ASUS · Accepted solution]

@eyebrowz 
Could you please provide the method you used to perform the check, along with screenshots of the relevant pages? 
I will forward the information to the relevant team for further review and confirmation. 
Thank you.

[eyebrowz]

Hi

Further investigation into the depths of the BIOS showed certificate reference numbers.

I now know that machines made from 2024 onwards do have the certs already in place.  The fault/problem seems to be with Microsoft and not ASUS or Dell etc.

 So I think this can, from my point of view, be regarded as settled.  Linux Mint will continue to work.

I have done a factory re-install, installed W11 and Tiny11 with Secure Boot enabled so I believe all will be well.