Best Of

Acer just lost a majority users of there products. No support for computers the company that use 11 but will not support for a firmware update that all companies knew 3 years ago when windows made the decision. Now people have equipment that functions but will have no security. Guess Acer has decided that e-waste is the best option forcing customer to upgrade. Still purchasing equipment you are still looking at 1 year old technology or later depending on how the equipment was built. Now it has become a cycle of 2 years for replacement or fall behind. Just like any other electronics. Just my thoughts, looking for a new laptop that will not be Acer

Providing an update to the above (it appears I cannot edit comments…), adding some steps to the First important lesson paragraph:

First important lesson: if you happen to find yourself in this situation, and wish to keep your secure boot active, the only solution is to manually select as reliable the "reset" efi file in the boot directory (my BIOS provided this option to mark an efi file as reliable). NB: not the usual bootmgfw.efi, but the one clearly labelled to restore the BIOS. I then saved BIOS changes and rebooted with F12. Then I selected the option to use the Reset EFI, not the standard one. This repopulated the BIOS NVRAM and after another (standard) reboot I was finally able to get back to a system that had Secure Boot enabled again, but still with the security center warning.

I have an XC-1785. I upgraded from bios 1.06 to 1.08.

Bios 1.08 has ADESv2 but no support for new PK/KEK/DB/DBX, so key enrollment will fail.

Bios 1.07 has support, but since 1.08 has new ADESv2 function for the bios update, then downgrade could cause problems.

So I am waiting for bios 1.09….

Doing nothing will actually work - even when secure boot is enabled and key expired. There is an automatic fallback. But of course the annoying windows warning will still pop up every day and your computer does not comply with Win11 security.

This situation, created by Acer, is incredibly stupid. Normally teams responsible for security and teams responsible for performance perform a merger before releasing a new bios version.

Well, they do now and the new 1.09 bios will have both ADSEv2 update functionality and support for new keys when Windows 11 requests an update.

But again: Incredibly stupid of Acer to let this happen.

Well, it looks like "dcoblentz" seems to be having a lot of fun with one of the AI chatbots. :)

I too have seen some members refer to some machines as designed for Windows 10 and therefor not getting updates for the new boot certificates. Those are two entirely different things. Machines that are compatible with Windows 11 can run Windows 11, albeit with a few models that have some glitchy drivers for things like touchpads or fingerprint readers. Those tend to run Windows 11 fine, but without the extra features those drivers provide. Machines running Windows 11 though don't mean they will necessarily have the new boot certificates. Those machines that don't have the new certificates still function, they just don't have that extra level of security and might potentially be more prone to getting infected with some unknown future malware. Similar to when we all switched from the MBR style boot to the UEFI boot back in the late Windows 7 era, the change provides more security, but doesn't have any real functional changes to the way you use your computer now. Eventually most systems will get some sort of upgrade, but there will be some that don't. All you can do is wait to see whether yours does or does not. Go ahead and keep using it, make sure you get all updates as they are released through the normal channels, including antivirus updates and keep breathing. Life goes on.

Acer Predator Orion P03-650.

It's a 2024 machine, however it is not listed on their table of planned BIOS updates.

Surely this falls under Consumer Rights Legislation? Goods must remain fit for purpose for a reasonable time, including digital stability (essential security updates).

Guys.

dcoblentz appears to be a user that is just feeding your messages into an AI chatbot and then pasting its responses in here.

The current mainstream guidance if your machine doesn't accept the new 2023 certificates is to leave secure boot on as it will still protect you from older bootkits, you won't get new secure boot updates going forward but this is still better than nothing.

There has not been any announcement from Microsoft regarding a future update that will force the 2023 certificates and brick all the older computers. That is an AI generated hallucination.

I have an older acer desktop that isn't getting the update. It sucks, but I am keeping secure boot on.