Preparing for the 2026 Secure Boot certificate expiration deadline (opens in new tab)

Microsoft is coordinating a global rollout of new Secure Boot certificates to replace legacy versions scheduled to expire in mid-2026. This transition ensures that the platform root of trust remains intact for verifying bootloaders and firmware during the startup process. While most modern devices receive these updates automatically via Windows Update, some hardware requires manual firmware intervention from manufacturers. <a href="