Secure Boot CA/Keys need to be updated

[kinggoblin5]

I'm getting the following error in my Windows 11 pro event viewer has anyone had similar and managed to fix it?

Secure Boot CA/keys need to be updated. This device signature information is included here.
DeviceAttributes: BaseBoardManufacturer:ASUSTeK COMPUTER INC.;FirmwareManufacturer:American Megatrends Inc.;FirmwareVersion:4301;OEMModelBaseBoard:ROG MAXIMUS Z690 FORMULA;OEMManufacturerName:ASUS;OSArchitecture:amd64;
BucketId: dec2176c6583ded9fc839efbf1f602e63561bab6c1af4a36160f17281fab4398
BucketConfidenceLevel:
UpdateType: 0
HResult: The operation completed successfully.

[MoKiChU]

Hi,

A thread about that already exists : https://rog-forum.asus.com/t5/gaming-motherboards/windows-uefi-ca-2023/m-p/1119843.

[kinggoblin5]

Tried to follow that solution and bricked the bios resulting in having to use the flashback bios.

Why don't Asus just release an updated bios with a set of updated keys that's compliant with the latest windows?

[inge70]

There's still plenty of time until June 2026.

Why MS is now forcing this error into the event log is something only MS knows.
Asus and all other manufacturers will surely release updates soon.
Only MS seems to be more diligent about querying and checking for current certificates, although clearly not all manufacturers have implemented them yet.

This doesn't just affect motherboards, but also graphics cards, etc., which require an update.

For now, all we can do is wait and see, which is why I already opened a thread on this topic, since the current KB5066835 is now causing this TPM_WMI error.

However, this doesn't currently cause any problems, and you can ignore the error for now.

Let's wait and see what happens next.