Unfortunately, Microsoft doesn’t decide if your PC will get updated Secure Boot certificates. The vendors who manufactured your hardware do. They must issue firmware that will support the new certs. If they don’t, you’re out of luck. How will you know? For prebuilt PCs and laptops from makers like Dell, Lenovo, HP, etc, their Secure Boot update guides may outline the policy. For computer components, their support pages may outline that info. If you can’t find this information, try support forums for further info. Pragmatically speaking, if your PC’s manufacturer no longer supports your compute
Your Windows PC is at risk if you’re missing these security certificates… If no updates pop up, install HWiNFO. This tool shows the exact model name of your motherboard and the currently installed BIOS/UEFI version, which you can find in the "Motherboard" section. …
… BIOS updates From time to time, manufacturers release updates to the UEFI firmware for their computers and motherboards. These updates are partly about various performance optimizations -- for example, when AMD or Intel have released new processors, but primarily about security. …
… Pair the motherboard with the Core Ultra 7 270K Plus processor as a combo, and you can save even more. …
… Looking up the support page and any relevant UEFI/BIOS updates is much easier as a result. The UEFI/BIOS update may also have self-executing versions you can run from within Windows. …
… All the release said was that ASRock's existing AM5 motherboards could support AMD's new chip with just a BIOS update, which isn't surprising. …
… You may also find that future Windows feature updates are no longer installable. Things to keep in mind Very old computers that still rely on BIOS rather than UEFI are generally not affected by this issue and will not receive the update. …