IN June 2026, Microsoft will replace the Secure Boot certificates expiring from 2011 with new 2023-dated certificates across supported Windows devices. Secure Boot is a UEFI firmware feature that validates the boot loader to prevent unauthorized access. Most users will not need to take action as updates will occur automatically; however, older devices might face issues transitioning.
If the deadline is reached without updating, devices will continue to boot but will miss future security updates and protections, becoming vulnerable to emerging threats like bootkits. Users are advised to maintain Windows updates, check Secure Boot status, and ensure older hardware is up-to-date with firmware.