How to check if Windows 11 has applied the new Secure Boot 2023 certificates (replaces Secure Boot 2011)

Microsoft is updating Windows 11's Secure Boot certificates from 2011 to the new Windows UEFI CA 2023 certificates to enhance security during startup. Users may see Event Viewer logs indicating the transition to the new certificates after the February 2026 update. The process involves two steps: making the new certificate available to Windows and applying it to the system firmware. Users can check if the new certificate has been applied using a PowerShell command. It's important to note that Microsoft is not directly updating BIOS, and users should only update BIOS if instructed by the device manufacturer.