Back to today’s briefing

Story perspectives

Microsoft Updates Secure Boot Certificates to Prevent Malware

1/14/2026

34 7

Summary

Story summary

Microsoft is replacing expiring Secure Boot certificates on Windows 11 versions 24H2 and 25H2.
The updates prevent boot malware by verifying signatures against trusted certificates.
The June 2026 expiry could affect bootability, so updates address the risk.
Automatic updates roll out to devices with update signals — IT administrators can manually deploy certificates if needed.
Users can check certificate status with Windows Powershell.

1 of 1

Story summary

Microsoft is replacing expiring Secure Boot certificates on Windows 11 versions 24H2 and 25H2.
The updates prevent boot malware by verifying signatures against trusted certificates.
The June 2026 expiry could affect bootability, so updates address the risk.
Automatic updates roll out to devices with update signals — IT administrators can manually deploy certificates if needed.
Users can check certificate status with Windows Powershell.