microsoft · Pete Batard (pbatard) · Sep 4, 2026
diff --git a/PostSignedObjects/DBX/README.md b/PostSignedObjects/DBX/README.md
@@ -0,0 +1,9 @@
+# Contents of the DBX Folder
+
+This folder contains the last auth2 DBX binaries that were signed using KEK 2011.
+
+Because KEK 2011 has now expired, and newer DBX binaries are signed with KEK 2023, this
+folder and its content should be considered obsolete and **will be deleted in 2027**.
+
+If you were referencing content from this folder directly, you should move to using the new
+`.auth2` binaries from either the `SignedByKEK2011` or `SignedByKEK2023` folders.
diff --git a/PostSignedObjects/DBX/amd64/DBXUpdate.bin b/PostSignedObjects/DBX/amd64/DBXUpdate.bin
diff --git a/PostSignedObjects/DBX/arm/DBXUpdate.bin b/PostSignedObjects/DBX/arm/DBXUpdate.bin
diff --git a/PostSignedObjects/DBX/arm64/DBXUpdate.bin b/PostSignedObjects/DBX/arm64/DBXUpdate.bin
diff --git a/PostSignedObjects/DBX/x86/DBXUpdate.bin b/PostSignedObjects/DBX/x86/DBXUpdate.bin
diff --git a/PostSignedObjects/SignedByKEKLatest b/PostSignedObjects/SignedByKEKLatest
@@ -0,0 +1 @@
+SignedByKEK2023