Windows 10 “Secure Boot is on, but your device is using an older boot trust configuration”

This likely means that your Windows 10 computer is waiting to update its Secure Boot security certificates. Microsoft is currently replacing old Secure Boot certificates from 2011 with newer, more secure 2023 certificates. If you see this warning, this implies that your Secure Boot is active (so your computer is protected), but the automated system has either paused the final update or is still verifying if your motherboard is fully ready for the new keys.

In most cases, you might not need to take any action. The warning is a reporting mismatch while Microsoft rolls out the update in phases. Keep your device connected to the internet and run all available updates. You can review in Windows Update History under "Other Updates" to see if a "Secure Boot Allowed Signature Database Update" is pending.

Microsoft uses system telemetry to safely classify your hardware group for the automatic update. You can help this process by going to Settings, choosing Privacy, and then selecting Diagnostics and feedback to ensure your diagnostic data is turned on. You can also visit your computer manufacturer's official support site to download and install the latest firmware update for your specific motherboard model, which often includes the new 2023 certificates.

The warning should disappear on its own once the Windows Security app syncs with Microsoft's background data.

If the above response helps answer your question, remember to "Accept Answer" so that others in the community facing similar issues can easily find the solution. Your contribution is highly appreciated.

hth

Marcin