You are using an out of date browser. It may not display this or other websites correctly. You should upgrade or use an alternative browser.
kek update
About this tag
The kek update tag on WindowsForum covers discussions about Microsoft's Secure Boot certificate expiration scheduled for 2026. This platform-level warning affects Windows devices using certificates issued around 2011, which underpin the pre-boot trust model. Without the replacement certificate family (Windows UEFI CA 2023), systems may enter a degraded security state, limiting boot-time protections, firmware updates, and validation of newer boot components. Threads tagged with kek update focus on understanding the impact, preparing for the transition, and ensuring systems receive the necessary updates to maintain security posture.
Microsoft has issued a platform-level warning: the Secure Boot certificates first issued around 2011 that underpin Windows’ pre-boot trust model begin expiring in June 2026, and although most updated systems will continue to boot, devices that do not receive the replacement certificate family...
certificate updates
enterprise it
firmware updates
it administration
kekupdate
oem firmware
oobe 2026
oobe updates
safe os update
secure boot
uefi
uefi certificates
windows 10 esu
windows 11
windows 11 26h1
windows security
windows update