Microsoft is keeping Secure Boot alive with Windows updates

ThinkingNews Desk · how this was written
Microsoft will refresh Secure Boot certificates through Windows updates in 2024, affecting Windows 11 and Windows 10 ESU users. The new certificates replace those set to expire in 2026, ensuring older PCs remain eligible for future security updates. This routine renewal maintains the boot-loader verification that protects against unverified software.
Written from all 4 reports below, not from any single one.
How it was reported
- Engadget·Microsoft will start refreshing Secure Boot certificates in March for Windows 11 and Windows 10 ESU users
Microsoft will refresh Secure Boot certificates in March. This update affects Windows 11 and Windows 10 ESU users. The refresh aims to enhance security.
- The Verge·Microsoft is keeping Secure Boot alive with Windows updates
Microsoft is updating Secure Boot certificates on Windows devices. The new certificates will be rolled out via Windows updates, replacing those set to expire in 2026. This marks a "generational refresh" of the security standard introduced in 2011.
- TechMeme·Microsoft is automatically replacing Secure Boot certificates for older PCs before they expire later this year; Secure Boot was first introduced in 2011 (Jess Weatherbed/The Verge)
Microsoft is replacing Secure Boot certificates for older PCs. Devices without new certificates may miss future security updates. Secure Boot was introduced in 2011.
- Ars Technica·Windows' original Secure Boot certificates expire in June—here's what you need to do
Windows' original Secure Boot certificates will expire in June and October. Secure Boot verifies PC bootloaders to prevent unverified software from loading. Microsoft is preparing for the expiration, a routine renewal process.