Your Windows PC's security foundation could expire in 8 weeks - Here's how to check if you're eligible for a new Secure Boot certificate
Windows Central • • technology
Key Points:
- Microsoft’s Secure Boot certificates, integral to Windows PC security since 2011, are set to expire in June 2026, marking the first time these certificates have faced a cutoff date.
- Most modern Windows 11 PCs will automatically receive updated Secure Boot certificates via Windows Update, but some older systems may require firmware updates from OEMs, which might not be available for devices beyond typical support periods.
- Unsupported Windows versions, including Windows 10 without Extended Security Updates (ESU), will not receive new Secure Boot certificates, potentially leading to degraded security and software or driver issues over time.
- Windows 10 users can enroll in the ESU program until October 14, 2025, to receive one additional year of support and updated Secure Boot certificates, helping maintain system security beyond the official end-of-life date.
- Users can check their PC’s Secure Boot certificate status via a PowerShell command and may need to manually update firmware or apply specific Windows updates to ensure continued protection after certificate expiry.
