tech

February 11, 2026

Windows' original Secure Boot certificates expire in June—here's what you need to do

PCs without the new certificates could eventually have trouble booting new OSes.

Windows' original Secure Boot certificates expire in June—here's what you need to do

TL;DR

  • Windows' original Secure Boot certificates, used since 2011, expire in June and October 2026.
  • PCs that don't receive updated certificates by the deadline may face degraded security and compatibility issues with future operating systems.
  • Windows Update is the primary method for delivering new certificates to supported systems.
  • Users can check if their PC has the new certificates using PowerShell commands.
  • Troubleshooting steps include ensuring a supported Windows version, enabling Secure Boot in BIOS, checking for firmware updates, and potentially resetting Secure Boot keys.
  • Newer PCs built since 2024 and those shipped in 2025 often include the updated certificates.

Continue reading the original article