Microsoft is rolling out "Secure Boot Allowed Key Exchange Key (KEK) Update," which requires a system reboot to finish ...
Windows 10 KB5078885 ESU out with Secure Boot 2023, replacing expiring Secure Boot certificates from 2011. But it's a staged roll out.
The latest Windows update has some greater features making it a tempting update.