Helios 300 - How to update the uefi BIOS (ending MS Cert in 2026)

pk736XX

can anyone tell me, how to update the uefi bios to prevent the loss of boot on 2026, until MS cert ends?

content for MS UEFI RECORD

SignatureOwner : 77fa9abd-0359-4d32-bd60-28f4e78f784b
SignatureSubject : CN=Microsoft Windows Production PCA 2011
Signature : [Subject]
CN=Microsoft Windows Production PCA 2011
[Issuer]
CN=Microsoft Root Certificate Authority 2010
[Serial Number]
6107765600xxxxxxxxxxx
[Not Before]
19.10.2011 20:41:42
[Not After]
19.10.2026 20:51:42
[Thumbprint]
580A6F4CC4E4B669B9EBDC1B2B3E087B80D0678D
SignatureType : a5c059a1-94e4-4aa7-87b5-ab155c2bf072

much better, a tool to keep it actual to set the new cert ?

thank you

[Edited the thread to hide sensitive content]

StevenGen

https://community.acer.com/en/discussion/707003/helios-300-how-to-update-the-uefi-bios-ending-ms-cert-in-2026

What is your PH 300 laptop model number, as to update the UEFI BIOS and prevent the loss of boot due to the expiration of Microsoft certificates in 2026, you can follow these steps:

1. Check for BIOS Updates on the Acer Support page: Visit the website of your motherboard or computer manufacturer and check for any available BIOS updates. Download the latest version if available.
2. Update Secure Boot Keys: Microsoft is rolling out replacement certificates to set new UEFI Certificate Authorities (CAs) trust anchors in Secure Boot. This update is available as an optional servicing update for all Secure Boot enabled devices from February 13, 20241.
3. Deploy the DB Update:
   • Deploy the Windows UEFI CA 2023 certificate to the Secure Boot Allowed Signature Database (DB). This update is included in Windows updates released on and after February 13, 20242.
   • For enterprise environments, perform a controlled rollout of the update after careful validation with representative devices to avoid any disruption2.
4. Registry Key Update:
   • Registry path: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecureBootName: AvailableUpdatesValue: 0x40
   • Restart the device. In some cases, a second restart may be required2.
5. Monitor for Known Issues: Be aware of any known issues with the update and refer to the relevant support articles for troubleshooting2.

By following these steps, you can ensure that your system remains secure and functional even after the expiration of the current Microsoft certificates in 2026. Good luck.

If this answers your question and solved your query please "Click on Yes" or "Click on Like" if you find my answer useful👍