Microsoft has paused the rollout of new Secure Boot certificates for Windows 11 to prevent widespread system instability. This pause matters because older PCs and those with outdated firmware risk freezing or failing to boot during the update process. Users should keep Secure Boot enabled to maintain malware protection while waiting for the issue to resolve.
Microsoft pauses Secure Boot certificate rollout to prevent system instability on older PCs
The disruption stems from the expiration of Secure Boot certificates originally issued in 2011. Microsoft intended to replace these expired keys with certificates from 2023 to maintain security standards. The transition requires compatible UEFI firmware on the host system to install the new keys.
Many older systems lack the firmware support needed for the 2023 certificate format. Some manufacturers have not released the necessary updates to bridge this compatibility gap. HP reported that specific devices freeze on the BitLocker screen when attempting the installation, blocking further progress.
Microsoft advises against disabling Secure Boot to bypass the update, as doing so reduces protection against malware. The company is working to resolve the firmware compatibility issues before resuming the certificate distribution. We looked at the last Windows 11 update earlier while tracking these stability themes.
The halt is a temporary measure to protect system integrity during the certificate transition. Microsoft will resume deployment once firmware compatibility issues are resolved across supported hardware.
Discussion
0 comments
Log in to join the thread with a thoughtful take, question, or correction.