Back to today’s briefing

Story perspectives

Microsoft Rolls Out Secure Boot Updates, Windows 10 ESU Required

5/11/2026

38 6

Summary

Story summary

Microsoft will update Secure Boot certificates on most PCs—newer machines likely already have them—before they expire in June 2026.
Older machines will receive the certificates in monthly updates that may trigger one restart after May and will be flagged by the Windows Security app if action is needed.
Windows 10 PCs not eligible for regular updates must enroll in the extended security update (ESU) program to receive the certificates.

1 of 1

Story summary

Microsoft will update Secure Boot certificates on most PCs—newer machines likely already have them—before they expire in June 2026.
Older machines will receive the certificates in monthly updates that may trigger one restart after May and will be flagged by the Windows Security app if action is needed.
Windows 10 PCs not eligible for regular updates must enroll in the extended security update (ESU) program to receive the certificates.