Story perspectives

Microsoft Updates Security Certificates for Windows Devices

2/11/2026

Summary

Story summary

Microsoft is replacing boot-level security certificates on Windows devices before expiration between June 2026 and October 2026.
The update is part of regular Windows updates and marks a generational refresh of Secure Boot.
If certificates expire, PCs continue to operate but enter a degraded security state.
New certificates began rolling out with the Windows 11 KB5074109 update last month.
Windows 10 users must enroll in Extended Security Updates to receive them.

1 of 1

Story summary

Microsoft is replacing boot-level security certificates on Windows devices before expiration between June 2026 and October 2026.
The update is part of regular Windows updates and marks a generational refresh of Secure Boot.
If certificates expire, PCs continue to operate but enter a degraded security state.
New certificates began rolling out with the Windows 11 KB5074109 update last month.
Windows 10 users must enroll in Extended Security Updates to receive them.