Q: What is your official guidance on the Microsoft 2023 CA certificate transition:

A: Please refer to https://www.getac.com/us/legal/microsoft-secure-boot-certificate-transition-2023-ca-and-black/

Q: Why do I get secure boot error or black screen when I try to boot my OS?

A: You likely updated to 2023 certificates which updated the boot loader and a couple things may have occurred:

1. If your unit is an In-Market device as devices in our above guidance:
   1. Secure boot in your bios has been reset to default.
   2. Motherboard has been replaced which would have the 2011 certificates (typically should only occur at repair center).

Q: How do I update secure boot and boot manager?

A: Please refer to the following link to update the certificates via registry (also linked in our official guidance). This links directly to the mitigation steps, but it is recommended to read the whole article. https://support.microsoft.com/en-us/topic/how-to-manage-the-windows-boot-manager-revocations-for-secure-boot-changes-associated-with-cve-2023-24932-41a975df-beb2-40c1-99a3-b3ff139f832d#bkmk_mitigation_guidelines

Here is an article that explains the registry changes and error conditions with those registry changes in the above article: https://support.microsoft.com/en-us/topic/registry-key-updates-for-secure-boot-windows-devices-with-it-managed-updates-a7be69c9-4634-42e1-9ca1-df06f43f360d