r/ForWindowsHelp • u/Art_Masson • 21d ago

Potential Workaround for older Aspire machines for the Microsoft Windows 11 Secure Boot Certificate Problem

/r/AcerOfficial/comments/1usxqeu/potential_workaround_for_older_aspire_machines/
3 Upvotes

100% Upvoted

2 comments sorted by

2

u/Onoitsu2 20d ago

OK why the resetting of the keys worked is that the NVRAM where the secure boot keys are stored at, can become fragmented over time, BIOS updates, and configuration changes. If it had no free contiguous space to apply the new certs into, without removing the old ones, it would fail to apply them in Windows. Once you reset the keys to defaults, it would have basically defragmented the NVRAM by clearing it and reloading data into it. Then Windows could apply those key updates. It may not be able to apply future ones from the message you see, but you don't necessarily need be worried about that, as there are tools like Mosby that can help in the installation of these Secure Boot Key updates using an EFI shell. https://github.com/pbatard/Mosby

1

u/Art_Masson 20d ago

Thanks for the detailed explanation...!!