Microsoft has started rolling out new Secure Boot certificates that will automatically install on eligible Windows 11 24H2 ...
The January Patch Tuesday updates for Windows refresh the expiring certificates for Secure Boot, which protects your computer against bootkit malware.
Windows 10 KB5073724 is available, but it shows up only when you subscribe to ESU (Extended Security Updates).