Back to today’s briefing

Story perspectives

Microsoft to Expire Secure Boot Certificates June 2026

5/27/2026

41 4 Full Breakdown

Summary

Story summary

Microsoft will start expiring Secure Boot certificates on most PCs in June 2026.
Certificates issued in 2011 and used for 15 years will be replaced by new ones in the April and May 2026 updates, requiring PCs to restart to verify Secure Boot.
Missing the June deadline will stop boot-critical updates and DBX revocation lists, cause the Windows Security app to show warnings, and prompt enrollment in Extended Security Updates (ESU) program.

1 of 1

Story summary

Microsoft will start expiring Secure Boot certificates on most PCs in June 2026.
Certificates issued in 2011 and used for 15 years will be replaced by new ones in the April and May 2026 updates, requiring PCs to restart to verify Secure Boot.
Missing the June deadline will stop boot-critical updates and DBX revocation lists, cause the Windows Security app to show warnings, and prompt enrollment in Extended Security Updates (ESU) program.