> Not updating is not a solution, unless the motherboard manufacturer really fucked up and doesn't validate the expiration date. The article mentions that most

> Not updating is not a solution, unless the motherboard manufacturer really fucked up and doesn't validate the expiration date. The article mentions that most motherboards will probably not validate the expiration date. There is a residual concern that new versions of the Shim will not be signed with the expired key, and thus be unbootable on hardware that doesn't accept the new key.