{"id":509801,"date":"2026-06-20T15:43:12","date_gmt":"2026-06-20T15:43:12","guid":{"rendered":"https:\/\/www.newsbeep.com\/ie\/509801\/"},"modified":"2026-06-20T15:43:12","modified_gmt":"2026-06-20T15:43:12","slug":"microsoft-secure-boot-certificates-expire-june-27-heres-what-that-means-for-your-old-pc","status":"publish","type":"post","link":"https:\/\/www.newsbeep.com\/ie\/509801\/","title":{"rendered":"Microsoft Secure Boot certificates expire June 27\u2014here’s what that means for your old PC"},"content":{"rendered":"

Microsoft introduced Secure Boot<\/a> alongside Windows 8 in 2012 as a way to improve security on Windows PCs by preventing malicious software, including rootkits<\/a> and bootkits, from loading into your system before the operating system even starts.<\/p>\n

Almost a decade and a half later, the original Secure Boot certificates are set to expire at the tail end of June 2026. While this may sound concerning, most people using Windows PCs ought not to worry, even those who own old PCs that won’t receive updated certificates. Here’s why.<\/p>\n

What is Secure Boot?<\/p>\n

And why is it important?<\/p>\n

\"Booting<\/p>\n

Before I dive into the Secure Boot certificate process, let me quickly explain what Secure Boot is. As I’ve just said, it’s a UEFI<\/a> security feature introduced alongside Windows 8 in the early 2010s. It’s part of UEFI (Unified Extensible Firmware Interface) and runs the moment your computer turns on, before Windows even starts loading.<\/p>\n

Secure Boot checks boot components and verifies their signatures against trusted keys, signatures, and certificates stored in UEFI firmware. These include the Platform Key (PK), the Key Exchange Keys (KEK), the Allowed Signature Database (DB), and the Disallowed Signature Database (DBX).<\/p>\n

Together, they determine which code is allowed to run before the operating system starts loading. They also allow Microsoft and hardware vendors to update Secure Boot’s trust databases by adding new certificates and revoking compromised ones.<\/p>\n

Now, the catch is that these Secure Boot certificates have an expiration date. They were issued in 2011, one year before the release of Windows 8, and are set to expire in late June 2026, with one certificate (Microsoft Windows Production PCA 2011) expiring a bit later, on October 19, 2026.<\/p>\n

The Windows Secure Boot certificate update process is automated<\/p>\n

You should get new certificates via Windows Update<\/p>\n

Microsoft is replacing the old certificates with new ones, which were issued in 2023 and will be valid until 2038. The good news is that the update process is automated for most personal users. If you own a Windows PC, it should receive the new certificates through Windows updates.<\/p>\n

There’s a good chance your PC already has them, and there’s a simple way to check. Secure Boot certificate status was added to the Windows Security app via the Windows 11 KB5083769 update, which rolled out to Windows PCs in April 2026. Since it’s now June, your PC should already have the update installed.<\/p>\n

To check whether the new Secure Boot certificates are present on your PC, open Windows Settings and go to Privacy & security. Once there, click Windows Security, then click the Open Windows Security button at the top of the menu.<\/p>\n

Once you’re inside Windows Security, click the hamburger menu and select the Device security tab. You can find your machine’s Secure Boot status there. If you’ve got a green checkmark and the text says Secure Boot is on and all required certificate updates have been applied, you’re golden.<\/p>\n

But what if that’s not the case?<\/p>\n

What if your PC hasn’t received updated certificates?<\/p>\n

There’s no reason to panic<\/p>\n

\"The
\n Credit:\u00a0Jason Fitzpatrick \/ How-To Geek<\/p>\n

While most Windows PCs running Windows 11 have already had their Secure Boot certificates updated, some systems do not support automated certificate updates through Windows Update.<\/p>\n

\"Secure
\n Credit:\u00a0Microsoft<\/p>\n

If you notice a yellow warning sign when checking Secure Boot status in Windows Security, accompanied by a message stating that Secure Boot is enabled, but your device doesn’t support automated Secure Boot certificate updates, you should check whether your motherboard vendor has issued a firmware update that enables the process. If your motherboard is too old, and doesn’t have a firmware update available, you likely won’t be able to receive the updated certificates.<\/p>\n

\"Secure
\n Credit:\u00a0Microsoft<\/p>\n

PCs that have a red X warning next to their Secure Boot status in Windows Security aren’t able to receive the new certificates and will have to continue without them, even if Secure Boot is enabled. Similarly, if you don’t have Secure Boot enabled<\/a> on your PC in the first place, either because you bypassed Windows 11’s requirements<\/a> when installing the OS or because your PC is so old that it uses Legacy BIOS and doesn’t even support Secure Boot, you naturally won’t receive the updated certificates.<\/p>\n

Don’t worry though, because your PC will continue working fine even without the updated certificates, but its pre-boot security will be affected. Windows should continue booting up normally even if your machine doesn’t receive updated certificates. However, its security will be compromised because Microsoft won’t be able to update the Secure Boot databases that contain trusted certificates and revoked signatures, nor will the PC receive future Secure Boot updates designed to address newly discovered vulnerabilities.<\/p>\n

In other words, your PC will be protected against current boot-level threats and rootkits (as long as Secure Boot is active, of course), but it won’t receive future updates designed to protect against newly discovered threats. That said, this isn’t a reason to panic because the chances of your personal PC being infected by a rootkit or similar malware are very slim. As long as you follow common-sense security practices, you’ll likely be fine.<\/p>\n

Secure Boot certificate updates are important, but your PC will continue working even without them<\/p>\n

At the end of the day, it’s definitely important that your PC receives updated Secure Boot certificates, because they allow Microsoft to address future boot-level threats. However, even if your PC cannot receive updates, it will boot and work fine with the caveat that it won’t receive future Secure Boot updates designed to protect against newly discovered boot-level threats.<\/p>\n

<\/p>\n

\t\t\t\t\t\tOS \t\t\t\t\t<\/p>\n

\t\t\t\t\t\t\t\t\t\t\tWindows, macOS, iPhone, iPad, Android<\/p>\n

\t\t\t\t\t\tBrand \t\t\t\t\t<\/p>\n

\t\t\t\t\t\t\t\t\t\t\tMicrosoft<\/p>\n

Microsoft 365 includes access to Office apps like Word, Excel, and PowerPoint on up to five devices, 1 TB of OneDrive storage, and more.<\/p>\n","protected":false},"excerpt":{"rendered":"Microsoft introduced Secure Boot alongside Windows 8 in 2012 as a way to improve security on Windows PCs…\n","protected":false},"author":2,"featured_media":509802,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[61,60,80],"class_list":["post-509801","post","type-post","status-publish","format-standard","has-post-thumbnail","category-technology","tag-ie","tag-ireland","tag-technology"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/posts\/509801","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/comments?post=509801"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/posts\/509801\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/media\/509802"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/media?parent=509801"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/categories?post=509801"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/tags?post=509801"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}