Microsoft is taking its time with the boot certificate rollout, but you don't have to. Activate the latest UEFI CA 2023 right now.

In June 2025, Microsoft announced that, in June 2026, it would begin deprecating Secure Boot certificates of Windows systems from 2011, which were superseded by their 2023 counterparts.

Microsoft has recently begun replacing expiring Secure Boot certificates on eligible Windows 11 systems running 24H2 and 25H2, according to a report by BleepingComputer. Update: On February 10, ...

Microsoft's Secure Boot certificates expire in June and need to be replaced. Microsoft provides a guide for server admins.

In brief: Secure Boot was originally introduced with Windows 8 as a firmware-based security feature designed to protect the OS from potentially malicious boot code. After more than 15 years, the ...

Microsoft is in the middle of a Secure Boot certificate transition that many users will not notice until it becomes a problem. Several long-standing certificates used by Windows devices are ...

Updated firmware trust chains strengthen rootkit protection and zero-trust infrastructure security.

Microsoft reminds everyone that the initial wave of Secure Boot certificates, dropped in 2011, are due to expire.

The consequences of missing the certificate refresh aren’t limited to a warning message. A summary includes several functional failures: Secure Boot may stop working, systems may no longer be able to ...

Get ye to Windows Update, because there's a good chance you've got new Secure Boot certificates to install. Microsoft just announced that it will be refreshing those certificates, which were ...

I'm worried… I have an Asus ROG Strix Z370-G Gaming motherboard from (I think) 2018, running Windows 11 25H2. Both Powershell commands return "false". I upgraded my BIOS to the last version 3004 ...

So... my Asus mobo (ROG Strix Z390-E Gaming) is from 2018, and while the code Andrew provided for PowerShell shows I'm OK for the new cert, I get "False" for Default ...