Microsoft reveals what happens to Windows 11 PCs if you ignore the Secure Boot deadline in June 2026

Key Points:

• Microsoft is rolling out new 2023 Secure Boot certificates to replace the original 2011 certificates that expire in June 2026, ensuring continued hardware security and boot integrity for Windows 11 PCs.
• The update process modifies UEFI firmware and requires Secure Boot to be enabled; devices with Legacy BIOS or disabled Secure Boot will skip or fail the update, and multiple reboots are needed without requiring BitLocker suspension.
• Enterprises face challenges deploying updates broadly due to firmware variability, PXE boot limitations, and the need for careful testing before enabling policies fleet-wide; server environments and Hyper-V virtual machines require manual interventions.
• Ignoring the update will not prevent PCs from booting but will permanently degrade system security by stopping boot-critical updates and malware blacklists, and future Windows upgrades will fail without the new certificates.
• Users and IT admins can check Secure Boot certificate status via the Windows Security app or PowerShell scripts, with Microsoft using telemetry to gradually expand the rollout; the 2023 certificates are expected to remain valid until at least 2038, pending future cryptographic transitions.