Windows 11 Users Warned: Secure Boot Certificates Expire Next Month

Microsoft is issuing a renewed warning to Windows 11 users regarding the upcoming expiration of their Secure Boot certificates. The old certificates, in use since 2011, are set to expire in June 2026, and the tech giant is strongly encouraging users to upgrade to the newer 2023 version.

While the expiration won't render most computers unusable or turn them into "brick machines," Microsoft has clarified the consequences of not upgrading. Users will experience a gradual decline in system security. More significantly, future major Windows 11 version updates, starting with versions after 26H2, will require the updated 2023 certificates, effectively blocking installations on systems with outdated credentials.

Secure Boot acts as a crucial verification mechanism embedded in a computer's UEFI firmware. Its primary function is to check the digital signatures of the Windows boot program, drivers, and system components. This ensures that only trusted software can initiate the startup process, preventing malicious programs from infiltrating the system at a fundamental level.

Users can easily check their Secure Boot status by navigating to "Windows Security," then "Device Security," and finally "Secure Boot." A green indicator signifies that the update is complete and the system is secure. A yellow status means the update is pending, while a red status indicates that manual intervention is required.

For users concerned about older hardware, Microsoft has stated that legacy BIOS computers, which do not support UEFI, will not be forced to update. The system will recognize the lack of Secure Boot support and will not cause boot failures.