How to check your Windows PC for expiring security certificates - a big one is ending soon ...

Microsoft confirms systems without updated Secure Boot certificates will boot normally but lose some security protections.

Microsoft has recently begun replacing expiring Secure Boot certificates on eligible Windows 11 systems running 24H2 and 25H2 ...

Microsoft is rolling out "Secure Boot Allowed Key Exchange Key (KEK) Update," which requires a system reboot to finish ...

In June 2025, Microsoft announced that, in June 2026, it would begin deprecating Secure Boot certificates of Windows systems from 2011, which were superseded by their 2023 counterparts.

Microsoft is in the middle of a Secure Boot certificate transition that many users will not notice until it becomes a problem. Several long-standing certificates used by Windows devices are ...

Get ye to Windows Update, because there's a good chance you've got new Secure Boot certificates to install. Microsoft just announced that it will be refreshing those certificates, which were ...

TL;DR: Secure Boot certificates in Windows 10 and 11 will expire by June 2026, risking system security and compatibility. Microsoft is issuing new certificates through updates and OEM firmware ...

Microsoft is rolling out refreshed Secure Boot certificates across the Windows ecosystem, aiming to replace the original trust anchors that have been in use since 2011. Secure Boot is enforced by UEFI ...

I'm worried… I have an Asus ROG Strix Z370-G Gaming motherboard from (I think) 2018, running Windows 11 25H2. Both Powershell commands return "false". I upgraded my BIOS to the last version 3004 ...

Microsoft says Secure Boot certificates are being updates, and Windows 10 isn't fully eligible Affected devices will enter a "degraded security state" Is this another push to drive Windows 11 adoption ...

So... my Asus mobo (ROG Strix Z390-E Gaming) is from 2018, and while the code Andrew provided for PowerShell shows I'm OK for the new cert, I get "False" for Default ...