Story perspectives

Microsoft Secure Boot Certs Expire 2026, Updates Required

5/3/2026

Summary

Microsoft Updates Certificates

Microsoft said Secure Boot certificates on Windows PCs will expire in June 2026, requiring updates.
Most Windows 11 PCs will receive new certificates automatically through Windows Update.
Older PCs must obtain a firmware update from their OEM’s support site.
Windows 10 PCs outside the Extended Security Update (ESU) program will not receive new certificates.
Windows 10 PCs in ESU will receive updated certificates via Windows Update until enrollment ends on October 13, 2026.

Summary

Microsoft Certs Expire

Expiring Secure Boot certificates are raising concerns that legacy PCs may become vulnerable to malware.
Microsoft’s Secure-Boot-Update task requires a few restarts before the new certificates take effect.
Users are flocking to the r/WindowsCentral subreddit to share experiences and seek upgrade or replacement advice.
Online guidance advises checking certificate installation with PowerShell commands, adding a DIY troubleshooting step for technically-savvy users.

1 of 2

Microsoft Updates Certificates

Microsoft said Secure Boot certificates on Windows PCs will expire in June 2026, requiring updates.
Most Windows 11 PCs will receive new certificates automatically through Windows Update.
Older PCs must obtain a firmware update from their OEM’s support site.
Windows 10 PCs outside the Extended Security Update (ESU) program will not receive new certificates.
Windows 10 PCs in ESU will receive updated certificates via Windows Update until enrollment ends on October 13, 2026.

1 / 2