Microsoft is preparing to expire the 2011-era Secure Boot certificates that currently back boot security on most Windows PCs. The expiration takes effect on June 24.
Devices lose future boot-level security patches after this date.
Devices without the newer 2023 replacement certificates will continue to function normally after this date. They will simply lose the ability to receive future boot-level security patches through Windows updates.
Windows 11 users on supported builds are receiving these certificate replacements automatically. Older hardware and unsupported Windows 10 machines face a more difficult path for updating their firmware.
According to Microsoft Support, devices from manufacturers that have stopped issuing firmware updates may stay on the outdated 2011 certificates regardless of what Windows installs. This outcome depends entirely on OEM support status and specific hardware configurations.
Discussion
0 comments
Log in to join the thread with a thoughtful take, question, or correction.