Microsoft has blocked Secure Boot mitigations for the BlackLotus (CVE-2023-24932) vulnerability on some PCs. The block affects Windows Server 2012 and 2012 R2 systems due to incompatibilities with TPM
Secure boot db RSS
Microsoft is about to update its UEFI Secure Boot Keys required for certificate management. These keys are from the Windows 8 era and are set to expire soon, just a couple of years from now.