Challenges

• Firmware vendors Doing It WrongTM
• Broken UEFI, plus new ways!
• Using broken keys
• Leaking keys
• Mis-handling revocations
• CA rollover
• Microsoft 3rd-party UEFI CA Not After : Jun 27 21:32:45 2026 GMT
• Microsoft Root CA Not After : Oct 19 18:51:42 2026 GMT
• Revocations