Microsoft has begun rolling out updated Secure Boot certificates through monthly Windows updates to replace the original 2011 certificates that will expire in late June 2026.

Microsoft has launched a critical "generational refresh" of Secure Boot certificates to replace aging security keys that are ...

Microsoft is preparing to roll out new Secure Boot certificates via Windows Update to keep old PCs protected from boot‑level vulnerabilities.