[Secure Boot KEK Update] TOSHIBA PK-Signed KEK Update

[YN-1048]

OEM Certificate Submission

OEM Name: [TOSHIBA Corporation]
Contact Email: [yuki.numata.d89@mail.toshiba]

Certificate Details

• Platform Key Thumbprint: [e03ae95f7862f2e1f75b367ed1372e73e8d8cbfd]
• Expiration Date: [2028-10-27]

Testing Completed

• [*] Windows validation
• Linux validation

Security Review

• [*] No known security issues

Additional Notes

None

[Doug Flick (Flickdm)]

I'm going to follow back up with a update to the kek_update_map in a different PR

[Doug Flick (Flickdm)]

FYI I'm going to fix up the kek update map once these are in as separate commit and remove the instructions to update it.

[YN-1048]

Is there any additional work required on our part to have this reviewed?

[YN-1048]

When will this matter be addressed?????

[Doug Flick (Flickdm)]

When will this matter be addressed?????

Your PR has merge conflicts and merging is disabled unless you correct it - sadly I don't have permissions to address it for you - normally this would be resolved with a rebase. What I can do to make this move forward is to simply take your assets and make a PR myself as then I can address it.

[SochiOgbuanya]

Hello YN-1048, apologies for the delayed response. I was out of office for the past 2 weeks. You're PK signed KEK was included in the July Windows update B release - 07/14/2026. I do not have permissions to merge your PR into the main branch

Thanks,
Sochi

[Doug Flick (Flickdm)]

Either we can close out this PR - and mine will be merged or you can take my fix.

#458