Microsoft's original 2011 UEFI Secure Boot certificates for Windows are expiring on June 24, 2026. All Windows PCs manufactured before 2024 need to be updated to the 2023 certificates to continue receiving security updates and maintain protection against UEFI bootkits like BlackLotus. Devices with automatic updates are likely already updated, but enterprise environments with staged patching may not be. Windows 10 PCs outside Microsoft's Extended Security Update program won't automatically receive the new certificates and will gradually lose Secure Boot functionality. Microsoft has released a new indicator in the Windows Security app to help users check certificate status, and will add notifications next month. IT admins are urged to consult Microsoft's playbook, inventory affected systems, and apply updates before the deadline.
Sort: