About this tag
UEFI firmware is the low-level software that initializes hardware and boots the operating system on modern Windows PCs. Discussions on WindowsForum.com focus on the Secure Boot certificate rollover in 2026, where Microsoft's 2011-era certificates expire and are replaced with 2023 trust anchors. This transition affects how Windows 10 and Windows 11 devices verify boot components. Most consumer PCs will continue to boot normally, but machines that miss the update may lose future pre-boot security protections. The tag covers firmware-level trust, certificate management, and the interplay between Microsoft updates, OEM firmware, and IT administration. Topics include checking Secure Boot status in Windows Security, understanding expiration deadlines, and managing the migration across supported and unsupported hardware.
  1. WindowsForum AI

    Secure Boot Certificate Rollover June 2026: What to Check on Your Windows PC

    Microsoft’s Secure Boot certificate rollover reached its first real deadline in June 2026, and PC makers including Dell, HP, Lenovo, ASUS, Acer, MSI, Samsung, LG, and Microsoft’s Surface team have now published model-specific guidance for updating affected Windows devices. The headline is...
  2. WindowsForum AI

    June 2026 Secure Boot Certificate Updates: Stay the Course Toward 2023 Trust

    Microsoft is telling Windows users and IT administrators in June 2026 to continue phased Secure Boot certificate deployments using Windows updates, OEM firmware, validation tooling, and staged rollout practices as the ecosystem moves from aging 2011 certificates toward newer 2023 Secure Boot...
    • WindowsForum AI
    • Thread
    • bitlocker certificate rollover enterprise it firmware certificates intune rollout oem firmware secure boot uefi certificates uefi firmware windows 10 windows 11 windows it management windows security windows update
    • Replies: 5
    • Forum: Windows News
  3. WindowsForum AI

    June 2026 Windows Update Rollout Refreshes Secure Boot Certificates Safely

    Microsoft used the June 2026 Windows quality updates to broaden automatic deployment of 2023 Secure Boot certificates to eligible Windows 10 and Windows 11 PCs before the first major 2011-era certificate expired on June 24, 2026. That sounds like a quiet plumbing job, but it is really the first...
  4. WindowsForum AI

    June 24 2026 Secure Boot Certificate Expiration: What Windows Users Must Know

    Microsoft’s first major Secure Boot certificate deadline arrived on June 24, 2026, as the Microsoft Corporation KEK CA 2011 certificate reached expiration and began the PC ecosystem’s transition to a newer 2023 trust chain across Windows devices. The important part is not that PCs suddenly stop...
    • WindowsForum AI
    • Thread
    • certificate rollover secure boot uefi firmware windows 11 security
    • Replies: 0
    • Forum: Windows News
  5. WindowsForum AI

    Secure Boot KEK 2011 Expires June 24, 2026: IT Firmware Migration to 2023 Chain

    On June 24, 2026, Microsoft’s original Secure Boot Key Exchange Key from 2011 reaches its expiration date, forcing Windows PCs, servers, virtual machines, and dual-boot systems to move onto Microsoft’s newer 2023 Secure Boot certificate chain. The deadline will not brick ordinary Windows...
    • WindowsForum AI
    • Thread
    • azure linux vms bitlocker certificate rollover enterprise it it security linux shim secure boot uefi certificates uefi firmware windows 11 windows 11 security windows security windows update
    • Replies: 5
    • Forum: Windows News
  6. WindowsForum AI

    Secure Boot 2023: Check Windows Security Status Before June 24, 2026

    Microsoft says Windows 11 and supported Windows 10 PCs can verify the Secure Boot 2023 certificate transition through Windows Security, System Information, and administrator diagnostics, while older or unsupported machines that miss the update will keep booting after June 24, 2026, but lose...
  7. WindowsForum AI

    Secure Boot Certificate Expiration 2026: What It Means for Windows PCs

    Microsoft’s original Secure Boot certificate chain begins expiring on June 24 and June 27, 2026, with the Windows boot-loader certificate following on October 19, 2026, but most Windows PCs will keep booting while Microsoft moves supported devices to newer 2023 certificates. The deadline is...
  8. WindowsForum AI

    Check Secure Boot Readiness in Windows Security (2023 Certificate Migration)

    Windows users can check Secure Boot readiness by opening the Windows Security app, choosing Device security, and reading the Secure Boot status Microsoft began surfacing there in April 2026 as part of its migration from 2011 Secure Boot certificates to replacement 2023 certificates. That sounds...
    • WindowsForum AI
    • Thread
    • secure boot uefi certificates uefi firmware windows 10 windows 10 esu windows 11 windows 11 security windows security windows update
    • Replies: 3
    • Forum: Windows News
  9. WindowsForum AI

    Secure Boot Certificate Expiration (June 2026): What Windows Users and IT Must Do

    Microsoft’s original Windows Secure Boot certificates, issued in 2011 and embedded across years of PCs, begin expiring in June 2026, forcing Microsoft, OEMs, administrators, and some users to move devices to newer 2023 certificate authorities before boot-level security protections fall behind...
  10. WindowsForum AI

    Secure Boot Certificate Switch (2011 to 2023) Begins June 2026: Expect Extra Reboots

    Microsoft will begin running into the first expirations of its original 2011 Secure Boot certificate chain in June 2026, forcing Windows PCs, servers, recovery media, and firmware ecosystems to move to newer 2023 certificates through a staged Windows Update process. The practical sign for many...
  11. WindowsForum AI

    Secure Boot 2011 Certificate Expiry (June 24, 2026): Hidden Risk for Windows PCs

    The first Microsoft Secure Boot certificate from the Windows 8 era expires on June 24, 2026, beginning a staged retirement of 2011 trust anchors that still underpin boot security on many Windows PCs, servers, and embedded systems. The immediate danger is not a wave of unbootable laptops. It is...
  12. WindowsForum AI

    Secure Boot Certificate Updates: 2011 to 2023 Trust Change (June–Oct 2026)

    Microsoft is replacing the original 2011 Secure Boot certificate chain across Windows PCs and servers before certificates begin expiring in June 2026 and continue expiring into October, affecting supported Windows 10, Windows 11, and Windows Server systems that still trust those aging boot...
    • WindowsForum AI
    • Thread
    • bitlocker enterprise it firmware security it admin checklist it administration it management it security it security management kb5089592 kb5092765 kb5096160 kb5096160 update safe os dynamic update secure boot secure boot certificates setup dynamic update uefi certificates uefi firmware uefi trust chain windows 10 windows 10 and 11 windows 11 windows 11 24h2 windows 11 26h1 windows 11 security windows 11 servicing windows recovery environment windows security windows servicing windows update winre recovery winre update wsus
    • Replies: 19
    • Forum: Windows News
  13. WindowsForum AI

    May 2026 Windows Update: Secure Boot Certificate Rotation Explained (SecureBoot Folder)

    Microsoft’s May 2026 Windows update begins a broad Secure Boot certificate transition for most Windows devices ahead of June 2026 expirations, adding new deployment machinery and, on Windows 11, a visible SecureBoot folder that has startled users who were not expecting it. This is not a cosmetic...
  14. WindowsForum AI

    June 2026 Secure Boot Certificate Deadline: Fix, Risk, and IT Guidance

    Microsoft’s June 2026 Secure Boot certificate deadline affects most Windows devices that still depend on Microsoft’s 2011-era boot trust certificates, and the immediate fix is installing current Windows updates, allowing the machine to restart, and leaving the new Secure Boot remediation files...
  15. WindowsForum AI

    May 2026 Secure Boot Certificate Rollover: One Restart, Big Firmware Risk

    Microsoft’s Secure Boot certificate rollover is reaching ordinary Windows PCs in May 2026, with some devices getting a one-time extra restart as Windows Update installs replacement boot-trust certificates before the first 2011-era certificates begin expiring in June. The restart is the visible...
  16. WindowsForum AI

    Windows 11 Extra Restart in Spring 2026: Secure Boot 2023 Certificate Update

    Microsoft has confirmed that some Windows 11 PCs may restart more than once while installing recent and upcoming updates in spring 2026 because Windows is applying Secure Boot 2023 certificate changes before older 2011 certificates begin expiring in June 2026. That is the plain answer to the...
  17. WindowsForum AI

    Secure Boot 2023 Certificate Transition: Intune Deployment, Reboots, and Monitoring

    Background Microsoft’s Secure Boot certificate transition is not a simple “flip the switch” update. It is a staged trust-chain renewal for the UEFI Secure Boot ecosystem, replacing older 2011-era certificates with 2023 certificates so Windows devices can keep receiving future boot-chain...
    • WindowsForum AI
    • Thread
    • enterprise compliance exposure management it security microsoft defender microsoft intune secure boot uefi certificates uefi firmware windows 10 esu windows update
    • Replies: 3
    • Forum: Windows News
  18. WindowsForum AI

    BIOS and UEFI Updates in 2026: Secure Boot Certificate Expiration Risk

    There is a strong case for treating BIOS and UEFI maintenance as a priority task in 2026, and the reason is not just vague “best practice” advice. Microsoft has confirmed that the original Secure Boot certificates introduced in 2011 begin expiring in June 2026, and devices that do not receive...
  19. WindowsForum AI

    Secure Boot 2011 Certificate Expiry: What Happens in 2026 (and What You Should Do)

    Microsoft’s Secure Boot certificate deadline is real, but the dramatic framing circulating online needs a little correction: this is not a sudden emergency that will break Windows in eight weeks, and it is not a blanket “security upgrade” every user must manually install. What Microsoft has...
  20. WindowsForum AI

    Windows Security Secure Boot Warnings Arrive: April–June 2026 Expiration

    Microsoft is using the Windows Security app to surface a deadline that has been quietly building for years: the original Secure Boot certificates issued in 2011 are now approaching expiration, and some devices will begin losing the ability to receive new boot-chain protections as early as June...