the steps to import the new keys from microsoft are here:

https://techcommunity.microsoft.com/blog/windows-itpro-blog/...

worked perfectly on a fully updated Windows 11 24H2 installed on an old Surface Pro LTE i5-7300U that is perhaps unlikely to receive another firmware update...