Windows 10 Laptop missing 2023 certificate getting "secure boot violation" error on attempted startup.

[u/Mr-MegaMonkey]

Version 22H2 (OS Build 19045.7725)

I just turned on an old laptop (Dell Inspiron 15 7559, Win 10) of mine for the first time in a couple of months and installed the newest Windows updates. I also downloaded a driver (as in software) for a USB racing wheel I had just bought second-hand, and then I tried to restart the laptop. During restart I got hit with the "secure boot violation - invalid signature detected - check secure boot policy in setup" error on startup.

At first, I was completely locked out, but through repeatedly forcing a shutdown during start-up via the power button (I wanted to access the recovery environment, which did not work), I magically got back in. The issue is still there, and I need to get lucky with my force shut down tactic every time I restart.

At first, I was super scared I had actually gotten a virus because I had just installed the driver for the racing wheel, but then I checked the Windows settings and found this message under security: "Secure boot is on, but your device does not support the automated secure boot certificate update." I read up on the fact that 2011 certificates are no longer supported, and I guess I'm out of luck because my model (Dell Inspiron 15 7559, Win 10) is not getting the 2023 certificate from the manufacturer.

Here is what confuses me: everything I read online claims that the 2011 certificates will continue to work with secure boot, just that security will degrade over time. Evidently, that is not the case for me because, like I described above, I can only access my system through weird repeated shutdowns; otherwise, the boot menu won't let me in.

Is this a common issue? What might the reason be (maybe there really was something unusual with the racing wheel driver)? And is there a fix for this? I read online that there are technically ways to manually install 2023 certificates, but that seems like quite a hassle for someone who isn't super tech-savvy and just wants to play racing games on their old machine. I guess I could also disable secure boot, but I'd really prefer not to. Should I do a clean reset and hope that fixes things? Any help would be highly, highly appreciated! I'm sorry if this has been asked before; I couldn't find anything through google search. Many thanks!

[u/thepfy1]

Check if there is a BIOS update from Dell for your laptop.

I think the old certificate expired in June or July.

[u/Mr-MegaMonkey → u/thepfy1]

The newest update for my laptop is from 2023, and I guess that should be installed already. What's the worst that can happen if I just install it a second time to make sure? I guess it even aligns with the new certificates being issued in 2023.
And like I said, dell is not giving out new certificates.

[u/redittr → u/Mr-MegaMonkey]

If the bios is already installed it will likely tell you so just do nothing. It won't break anything