You are using an out of date browser. It may not display this or other websites correctly. You should upgrade or use an alternative browser.
firmware trust
About this tag
The firmware trust tag covers discussions about the integrity and security of firmware-level components in Windows and Linux systems. Topics include the expiration of Microsoft's 2011 Secure Boot certificates, which affects the trust chain for booting and receiving security updates, and vulnerabilities in firmware drivers like the b43legacy Broadcom Wi-Fi driver that can lead to out-of-bounds reads. These threads emphasize the importance of maintaining firmware trust to prevent security degradation and ensure system reliability.
Microsoft’s 2011 Secure Boot certificate family begins expiring in June 2026, and the most consequential deadline is the Microsoft Corporation KEK CA 2011, whose replacement determines whether affected Windows devices can keep receiving future Secure Boot database and revocation updates. The...
bitlocker
certificate revocation
enterprise it
firmwaretrust
intune
intune management
intune monitoring
kb5094156
kek ca 2011
safe os dynamic update
secure boot
secure boot certificates
uefi certificates
windows 11 23h2
windows it admin
windows security
CVE-2026-46163 is a Linux kernel vulnerability published by NVD on May 28, 2026, affecting the b43legacy Broadcom Wi-Fi driver, where a firmware-controlled receive-path key index could bypass a production-enforced bounds check and trigger an out-of-bounds read in the driver’s key array. The fix...