I restored the default settings to Secure Boot. Big mistake

[dorf]

I tried to get the latest secureboot certificate for my old Dell 7010 Optiplex machine.  
I restored the default settings to Secure Boot. Big mistake.
 Now when secure boot is on. The machine doesn't boot and complains about no booting devises. 

The computer's secure boot can't find where to boot and the information apparently has to be entered manually.
 Secureboot's settings are now years old and it can't find a new configuration. 
What could be done here?
There are plenty of files to choose from in the secureboot menu, but I don't know what to put there for each of the four

Windows 11 upgraded from 10..... originally who knows what (used machine)

without secureboot it booting normally

 

[binaryzero]

Leave Secure Boot off, the Optiplex 7010 isn't getting a firmware update to support the changes...

[+Warwagon MVC]

See if this article I wrote the other day works for you.

[Ixion]

Appreciating this guide is for HP Laptops but here's how to update the UEFI certificate database manually whether the OEM supports it or not:

https://h30434.www3.hp.com/t5/Business-Notebooks/Enabling-new-UEFI-2023-CA-certificates-in-pre-2018-HP/td-p/9628370

[dorf]

On 21/06/2026 at 15:49, Warwagon said:

See if this article I wrote the other day works for you.

This might work, but the boot menu F12 only shows hdd and dvd+/- and Niks

In the bios all usb are enabled.

the usb stick is in place and in the boot menu it does not show up in the bios boot order.

[+Warwagon MVC]

On 22/06/2026 at 14:25, dorf said:

This might work, but the boot menu F12 only shows hdd and dvd+/- and Niks

In the bios all usb are enabled.

the usb stick is in place and in the boot menu it does not show up in the bios boot order.

In the boot options in the UEFI is set to legacy or CMS? It needs to be set to UEFI if it's not already.

[+Edouard Subscriber²]

The laptop in the bedroom is an Acer with i7-10510U CPU. Acer's website states they will not be upgrading it so I had little choice other than disable secure boot.

I know next to nothing on these matters so hopefully it will be fine.

[Taliseian]

There is a long thread (128pgs and counting) that I've been following over at ElevenForums that has a method for updating Secure Boot even if there is no BIOS upgrade.

I've used this method and had zero issues.

NOTE:  I do not take any responsibility if this or any other Secure Boot method bricks your system -- YMMV!  Read carefully before using!