secure boot

Secure Boot is a UEFI firmware security feature that validates boot components before the operating system loads, forming a critical trust anchor in Windows security. In June 2026, Microsoft's original 2011 Secure Boot certificates began expiring, requiring a transition to newer 2023 certificate authorities. This certificate rollover affects Windows 10, Windows 11, and Windows Server devices, with Microsoft and OEMs like Dell, HP, Lenovo, ASUS, and Surface providing updates via Windows Update and firmware patches. While most supported consumer PCs should continue booting normally, the expiration exposes challenges in managing firmware trust chains across diverse hardware. IT administrators must verify certificate status, apply updates, and ensure boot-chain integrity to prevent gradual security erosion. The transition highlights that Windows security depends on coordinated efforts between Microsoft, OEMs, and users.