Microsoft is rolling out "Secure Boot Allowed Key Exchange Key (KEK) Update," which requires a system reboot to finish ...
A handful of scripts can eliminate a lot of work.