Secure Boot Allowed Key Exchange Key (KEK) Update

AgitatedRiot

Secure Boot Allowed Key Exchange Key (KEK) Update

Update your bios if you can. OEMs have released new updates to BIOS

The KEK update adds new Microsoft Key Exchange Key certificates to your UEFI firmware to maintain Secure Boot trust, and it is typically applied automatically via Windows Update on supported systems.

Updating Microsoft Secure Boot keys | Windows IT Pro blog