Update 1/22/23: Title updated as MSI intentionally changed this setting as per statement below. Over 290 MSI motherboards are reportedly affected by an insecure default UEFI Secure Boot setting ...

Among the requirements for installing Windows 11 are two security features: Trusted Platform Module (TPM) version 2.0 and Secure Boot. As we’ve documented before ...

So... my Asus mobo (ROG Strix Z390-E Gaming) is from 2018, and while the code Andrew provided for PowerShell shows I'm OK for the new cert, I get "False" for Default ...