diff --git a/PostSignedObjects/DBX/README.md b/PostSignedObjects/DBX/README.md
new file mode 100644
index 00000000..3325d15a
--- /dev/null
+++ b/PostSignedObjects/DBX/README.md
@@ -0,0 +1,9 @@
+# Contents of the DBX Folder
+
+This folder contains the last auth2 DBX binaries that were signed using KEK 2011.
+
+Because KEK 2011 has now expired, and newer DBX binaries are signed with KEK 2023, this
+folder and its content should be considered obsolete and **will be deleted in 2027**.
+
+If you were referencing content from this folder directly, you should move to using the new
+`.auth2` binaries from either the `SignedByKEK2011` or `SignedByKEK2023` folders.
diff --git a/PostSignedObjects/DBX/amd64/DBXUpdate.bin b/PostSignedObjects/DBX/amd64/DBXUpdate.bin
new file mode 100644
index 00000000..f6ccec74
Binary files /dev/null and b/PostSignedObjects/DBX/amd64/DBXUpdate.bin differ
diff --git a/PostSignedObjects/DBX/arm/DBXUpdate.bin b/PostSignedObjects/DBX/arm/DBXUpdate.bin
new file mode 100644
index 00000000..feb134b0
Binary files /dev/null and b/PostSignedObjects/DBX/arm/DBXUpdate.bin differ
diff --git a/PostSignedObjects/DBX/arm64/DBXUpdate.bin b/PostSignedObjects/DBX/arm64/DBXUpdate.bin
new file mode 100644
index 00000000..33520068
Binary files /dev/null and b/PostSignedObjects/DBX/arm64/DBXUpdate.bin differ
diff --git a/PostSignedObjects/DBX/x86/DBXUpdate.bin b/PostSignedObjects/DBX/x86/DBXUpdate.bin
new file mode 100644
index 00000000..142584cb
Binary files /dev/null and b/PostSignedObjects/DBX/x86/DBXUpdate.bin differ
diff --git a/PostSignedObjects/SignedByKEKLatest b/PostSignedObjects/SignedByKEKLatest
new file mode 120000
index 00000000..b72e82bf
--- /dev/null
+++ b/PostSignedObjects/SignedByKEKLatest
@@ -0,0 +1 @@
+SignedByKEK2023
\ No newline at end of file