Microsoft has started an automated, phased replacement of expiring Secure Boot certificates on eligible Windows 11 systems, a preventative move to avoid widespread boot‑level serviceability and security loss when long‑running Microsoft certificates issued circa 2011 begin to expire in mid‑2026...