New Secure Boot Certificates for Older Computers

If you're prior to 2025, update before June 2026 expiry

https://techcommunity.microsoft.com/blog/windows-itpro-blog/act-now-secure-boot-certificates-expire-in-june-2026/4426856

For folks with Windows computers from before 2025 and non-copilot, secure boot certificates will be expiring in June 2026 including W11 and W10.

  • Affected: Physical and virtual machines (VMs) on supported versions of Windows 10, Windows 11, Windows Server 2025, Windows Server 2022, Windows Server 2019, Windows Server 2016, Windows Server 2012, Windows Server 2012 R2—the systems released since 2012, including the long-term servicing channel (LTSC)
  • Not affected: Copilot+ PCs released in 2025
  • Important: Check with your OEMs on the latest available OEM firmware. Apply any available firmware updates to your Windows systems before applying the new certificates. In the Secure Boot flow, firmware updates from OEMs are the foundation for Windows Secure Boot updates to apply correctly.

Please read the external link (even though it's a year old, it's valid) as your system requires the updated certificate. You may have been updated already, but it behooves one to check. How to do so is mentioned in the article.

0 views 2 replies
Reply #2 Top
Quoting pelaird, reply 3993118

And here's a good way to check if your Secure boot certificates are up to date in the Windows Security app.

 

Check for Secure Boot Cert Updates

End of pelaird's quote

Excellent find, pelaird.