Microsoft Says Windows Secure Boot Certificate Rollout Is Ongoing
If you haven't yet received a new Secure Boot certificate for your Windows PC, don't worry: Microsoft is still working on dishing them out.
Secure Boot helps protect the startup process by verifying digital signatures before any code loads into Windows. The tool's original certificates, issued in 2011, reached their expiration window in June 2026.
The company has spent the past months pushing new certificates through regular Windows updates on supported Windows 10 and Windows 11 devices, and it says the rollout will continue for more months. Microsoft also says that some systems require a firmware update from the device maker before the certificate update can be applied without issue.
That means you may need to install both Windows updates and OEM firmware updates. Newer PCs, especially those shipped after 2024, most likely already have the updated certificates, as reported by PCWorld.
You can check your device's Secure Boot status...
Copyright of this story solely belongs to extremetech.com. To see the full text click HERE