certificate renewal

Microsoft has warned that several long‑lived Secure Boot certificate authorities that Windows and many OEM firmwares depend on will begin to expire in June 2026 (with a final boot‑signing PCA following in October 2026), and Microsoft — together with major OEMs — is actively rolling a replacement...

Secure Boot’s root certificates are getting a generational refresh — and the Windows ecosystem is executing one of the largest coordinated certificate rollouts in recent memory to ensure PCs keep a trusted boot chain well past June 2026. This update is not an optional security nicety: it...

IT administrators now have practical, fleet-scale ways to check whether Windows devices are carrying the updated Secure Boot certificate chain and whether they’re ready to accept the upcoming Secure Boot updates — a crucial capability as Microsoft and OEMs rotate the platform’s cryptographic...

Microsoft released an out‑of‑band update on August 19, 2025 — KB5066189 for Windows 11 (OS Builds 22621.5771 and 22631.5771) — to fix a high‑impact regression introduced earlier in the August security rollup that broke Reset and cloud recovery flows, while reiterating a separate, platform‑level...

Maintaining a Virtual Private Server (VPS) is less a one-off setup task and more an ongoing discipline: apply updates on schedule, lock down access, automate backups, monitor performance, and test recovery so your services stay fast, available, and secure. The practical, seven‑point playbook...

Fixes an issue in which the private key permissions on a machine certificate are reset to the default values on a computer that is running Windows 7 or Windows Server 2008 R2. This issue occurs after the machine certificate is renewed by the Certificate... More...