u/ArtistBest4386

Am I right in my interpretation of the instructions at https://pcsupport.lenovo.com/us/en/products/laptops-and-netbooks/thinkpad-t-series-laptops/thinkpad-t14-type-20s0-20s1/20s0/20s00077mx//solutions/HT518129 that I can update the secure boot certificate by updating the BIOS to at least v1.35, then "Restore the Factory Keys in the Secure Boot menu of BIOS setup".

Done that (BIOS v1.37) but it doesn't appear to have updated it. At least HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecureBoot\Servicing\UEFICA2023Status still says "NotStarted".

Am I doing something wrong?