Microsoft released the KB5089549 update for Windows 11 on February 11, 2025. The update adds a new Secure Boot folder to the system root directory on eligible devices.
New Secure Boot folder contains PowerShell scripts
The folder is located at C:\Windows\SecureBoot. It contains several PowerShell scripts for IT administrators. These scripts help automate Secure Boot certificate updates. The scripts include Detect-SecureBootCertUpdateStatus.ps1, which collects device status data, and Aggregate-SecureBootData.ps1, which generates reports and dashboards. Other scripts automate Group Policy Object creation, orchestrate certificate rollout, and enable update tasks.
The update is available globally as part of Microsoft's Patch Tuesday release.
Microsoft updated Secure Boot certificates because the old ones expire in 2026. The update also includes a marker in the Windows Security app for home users. This helps users know their Secure Boot status.
Discussion
0 comments
Log in to join the thread with a thoughtful take, question, or correction.