Apr 16, 2026 • Jeffrey Schwartz
Microsoft's Original Windows Secure Boot Certificate Is Expiring
Microsoft has announced one of the largest coordinated security maintenance efforts across the Windows ecosystem due to the expiration of the original Windows...
Executive Summary
Microsoft has announced one of the largest coordinated security maintenance efforts across the Windows ecosystem due to the expiration of the original Windows Secure Boot certificate. Users and organizations must update their PCs to maintain Secure Boot functionality. Failure to update could expose systems to bootkit and rootkit attacks that Secure Boot is designed to prevent. This maintenance effort affects a wide range of Windows devices and requires prompt attention to ensure continuous security protection.
Summary
The Secure Boot refresh is one of the largest coordinated security maintenance efforts across the Windows ecosystem, Microsoft said. Update those PCs soon.
Published Analysis
Microsoft has announced one of the largest coordinated security maintenance efforts across the Windows ecosystem due to the expiration of the original Windows Secure Boot certificate. Users and organizations must update their PCs to maintain Secure Boot functionality. Failure to update could expose systems to bootkit and rootkit attacks that Secure Boot is designed to prevent. This maintenance effort affects a wide range of Windows devices and requires prompt attention to ensure continuous security protection. The Secure Boot refresh is one of the largest coordinated security maintenance efforts across the Windows ecosystem, Microsoft said. Update those PCs soon. The Secure Boot refresh is one of the largest coordinated security maintenance efforts across the Windows ecosystem, Microsoft said. Update those PCs soon.