support.microsoft[.]com/en-us/topic/secure-boot-certificate-update-status-in-the-windows-security-app-5ce39986-7dd2-4852-8c21-ef30dd04f046
However [this is Windows after all], it does not seem to work properly [for me anyway]. It is a nice idea... instead of using the Command Prompt or diving into the registry to find out if the newer secure boot certificate is installed, open Windows Security [click the icon in the notification area, or go to Settings -> Privacy & security -> Windows Security], and then click Device Security. The Secure Boot icon should show a green check, a yellow exclamation point, or a red X. The green check should mean it's installed, while the other 2 indicate problems. Problem is when I checked my Win11 VM it showed a green check, but everything else [using the command line & checking the registry] says that the new certificate Is Not installed.