Certificate Expiration: The KEK CA 2011 certificate expired on June 24, 2026, stopping unpatched systems from receiving new Secure Boot revocations. Trust Chain Preservation: The update replaces 2011 ...
Trusted host lists can help keep PowerShell remoting working in mixed domain and workgroup environments, but only if admins avoid overwriting existing WinRM settings.