The June Deadline: Microsoft Issues Urgent Secure Boot Certificate Updates

The June Deadline: Microsoft is issuing revitalised UEFI Secure Boot certificates to eligible Windows 11 devices (versions 24H2 and 25H2) this month, replacing the existing certificates that are set to expire in June 2026, according to the article. Secure Boot is described as a foundational security measure that ensures only authenticated bootloaders run on UEFI firmware, helping to prevent infiltration by persistent malware during startup.

Microsoft has indicated that the Secure Boot certificates used by a large majority of Windows devices will lapse beginning in June 2026, and failure to renew could undermine the integrity of Secure Boot for both consumer and enterprise hardware. To manage the transition, monthly quality updates will include telemetry to identify devices eligible for automated certificate delivery, deployed in a phased manner so a device receives the final update after demonstrating a history of successful signals.

If the automated process fails, administrators can apply the updated certificates manually through the Windows Registry, WinCS configuration system, or Group Policy Objects.