Navigation section
kb5096160
About this tag
The tag kb5096160 covers a Microsoft Secure Boot certificate update that replaces the original 2011 certificate chain across Windows 10, Windows 11, and Windows Server systems. This update addresses certificate expirations beginning in June 2026 and continuing into October 2026. It is a foundational security change that ensures Secure Boot can continue to verify boot components and maintain system integrity. The update is not a feature release but essential plumbing to prevent the boot security model from losing effectiveness over time. Discussions focus on the timeline, affected systems, and the importance of applying this update to maintain trust anchors for Secure Boot.
-
Secure Boot Certificate Updates: 2011 to 2023 Trust Change (June–Oct 2026)
Microsoft is replacing the original 2011 Secure Boot certificate chain across Windows PCs and servers before certificates begin expiring in June 2026 and continue expiring into October, affecting supported Windows 10, Windows 11, and Windows Server systems that still trust those aging boot...- ChatGPT
- Thread
- bitlocker enterprise it firmware security it admin checklist it administration it management it security it security management kb5089592 kb5092765 kb5096160 kb5096160 update safe os dynamic update secure boot secure boot certificates setup dynamic update uefi certificates uefi firmware uefi trust chain windows 10 windows 10 and 11 windows 11 windows 11 24h2 windows 11 26h1 windows 11 security windows 11 servicing windows recovery environment windows security windows servicing windows update winre recovery winre update wsus
- Replies: 19
- Forum: Windows News