{"id":184459,"date":"2026-01-15T11:22:53","date_gmt":"2026-01-15T16:22:53","guid":{"rendered":"https:\/\/pureinfotech.com\/?p=184459"},"modified":"2026-01-17T16:44:12","modified_gmt":"2026-01-17T21:44:12","slug":"windows-11-secure-boot-certificates-expiring-june-2026","status":"publish","type":"post","link":"https:\/\/pureinfotech.com\/windows-11-secure-boot-certificates-expiring-june-2026\/","title":{"rendered":"Microsoft replaces expiring Secure Boot certificates on Windows 11 \u2013 All details and how to update yours"},"content":{"rendered":"<ul class=\"sum\">\n<li>Secure Boot prevents low-level malware from compromising the Windows 11 startup process.<\/li>\n<li>Microsoft&#8217;s original 2011 Secure Boot certificates expire in June 2026, and new 2023 certificates extend protection to 2053.<\/li>\n<li>Devices purchased in 2024 and later likely already have the latest certificates. Others are receiving them gradually through Windows Update.<\/li>\n<li>You can check your certificate status using PowerShell, and manually update certificates using Registry tweaks and scheduled tasks if updates haven&#8217;t arrived automatically.<\/li>\n<\/ul>\n<p>The certificate for your PC&#8217;s Secure Boot module is expiring in June 2026. Starting with the <a href=\"https:\/\/pureinfotech.com\/kb5074109-windows-11-january-2025-update\/\">January 2026 Security Update<\/a>, Microsoft has begun a gradual rollout of a new certificate that will allow your computer to continue booting correctly and receive security updates.<\/p>\n<p>On <a href=\"https:\/\/pureinfotech.com\/tag\/windows-11\">Windows 11<\/a>, Secure Boot is a security feature available in the Unified Extensible Firmware Interface (UEFI) firmware that prevents unauthorized modifications to critical system files during startup. As a result, it ensures that a device boots using only software trusted by the manufacturer.<\/p>\n<p>In other words, <a href=\"https:\/\/pureinfotech.com\/enable-secure-boot-windows-11\/\">Secure Boot<\/a> helps protect your devices against low-level malware (such as bootkits and rootkits) that can infect the boot process and gain control of your computer before the operating system and your antivirus software even load.<\/p>\n<h2>Understand Secure Boot certificates<\/h2>\n<p>As part of the process, the feature uses cryptographic keys (known as certificate authorities (CAs)) to validate that firmware modules come from a trusted source, helping prevent malware from running during the early stages of the device startup.<\/p>\n<section class=\"custom-related-posts-wrapper\"><span class=\"custom-related-posts-heading\">Related<\/span><div class=\"custom-related-posts-container\"><a href=\"https:\/\/pureinfotech.com\/windows-11-kb5074109-nvidia-issue-black-screens-fix\/\" class=\"custom-related-post-item\" data-umami-event=\"related_inpost_clicked\" data-umami-event-name=\"Windows 11 January update (KB5074109) breaks NVIDIA GPUs (fix included)\"><div class=\"custom-related-post-thumbnail\"><img src=\"https:\/\/i0.wp.com\/pureinfotech.com\/wp-content\/uploads\/2026\/01\/windows11-kb5074109-nvidia-gpu-problem-hero.webp?fit=300%2C188&#038;quality=78&#038;strip=all&#038;ssl=1\" alt=\"Windows 11 January update (KB5074109) breaks NVIDIA GPUs (fix included)\" decoding=\"async\" loading=\"lazy\" \/><\/div><span class=\"custom-related-post-title\">Windows 11 January update (KB5074109) breaks NVIDIA GPUs (fix included)<\/span><\/a><\/div><\/section>\n<p>Now, Secure Boot certificates have always had expiration dates, as they help ensure your computer continues to receive security updates and boots correctly. That is why you have to install the 2023 certificates before the 2011 CAs start expiring in June of 2026.<\/p>\n<p><strong>If you have a device purchased in 2024 (or later), chances are that the latest certificates are already installed.<\/strong> However, for the rest of the computers, Microsoft is now in the process of rolling out the new Secure Boot certificates through Windows Update.<\/p>\n<p>In the <strong>&#8220;2026-01 Security Update (KB5074109) (26200.7623)&#8221;<\/strong> rolled out on January 13, 2026, the software giant has noted that updates now include <q class=\"inline-quote\">a subset of high-confidence device targeting data that identifies devices eligible to automatically receive new Secure Boot certificates. Devices will receive the new certificates only after demonstrating sufficient successful update signals, ensuring a safe and phased deployment.\u200b\u200b\u200b\u200b\u200b\u200b\u200b<\/q><\/p>\n<p>This means <strong>you don&#8217;t have to take any manual steps to update Secure Boot<\/strong>, other than allowing the system to keep receiving updates. At least from now until the June 2026 Security Update becomes available.<\/p>\n<h2>Check Secure Boot certificate expiration date<\/h2>\n<p>Since you won&#8217;t receive a notification that your computer now includes the latest certificate authorities, it&#8217;s important to check whether your device still needs an update.<\/p>\n<p>Windows 11 has no native command to display the human-readable firmware expiration date. However, you can check if you have the &#8220;updated&#8221; 2023 certificates (which replace the ones expiring in 2026) using these steps:<\/p>\n<p>Open <strong>PowerShell<\/strong> (admin) and run:<\/p>\n<pre>[System.Text.Encoding]::ASCII.GetString((Get-SecureBootUEFI db).bytes) -match 'Windows UEFI CA 2023'<\/pre>\n<ul>\n<li><strong>True:<\/strong> You have the new certificate (valid until 2053).<\/li>\n<li><strong>False:<\/strong> You are likely still on the 2011 certificate (expiring in 2026).<\/li>\n<\/ul>\n<figure id=\"attachment_184470\"  class=\"wp-caption alignnone\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" class=\"size-full wp-image-184470\" src=\"https:\/\/i0.wp.com\/pureinfotech.com\/wp-content\/uploads\/2026\/01\/powershell-check-secure-boot-cert.webp?resize=745%2C305&#038;quality=78&#038;strip=all&#038;ssl=1\" alt=\"PowerShell check Secure Boot cert expiration\" width=\"745\" height=\"305\" srcset=\"https:\/\/i0.wp.com\/pureinfotech.com\/wp-content\/uploads\/2026\/01\/powershell-check-secure-boot-cert.webp?w=745&amp;quality=78&amp;strip=all&amp;ssl=1 745w, https:\/\/i0.wp.com\/pureinfotech.com\/wp-content\/uploads\/2026\/01\/powershell-check-secure-boot-cert.webp?resize=300%2C123&amp;quality=78&amp;strip=all&amp;ssl=1 300w, https:\/\/i0.wp.com\/pureinfotech.com\/wp-content\/uploads\/2026\/01\/powershell-check-secure-boot-cert.webp?resize=150%2C61&amp;quality=78&amp;strip=all&amp;ssl=1 150w\" sizes=\"auto, (max-width: 745px) 100vw, 745px\" \/><figcaption class=\"wp-caption-text\">PowerShell check Secure Boot cert expiration \/ Image: Mauro Huculak<\/figcaption><\/figure>\n<p>Almost all modern Secure Boot chains rely on Microsoft&#8217;s 2011 certificates, which have the following <a href=\"https:\/\/support.microsoft.com\/en-us\/topic\/windows-secure-boot-certificate-expiration-and-ca-updates-7ff40d33-95dc-4c3c-8725-a9b95457578e\" target=\"_blank\" rel=\"noopener\">expiration dates<\/a>:<\/p>\n<ul>\n<li>Microsoft Corporation KEK CA 2011 (June 24, 2026).\u00a0<\/li>\n<li>Microsoft Corporation UEFI CA 2011 (June 27, 2026).<\/li>\n<li>Microsoft Option ROM UEFI CA 2011 (June 27, 2026).<\/li>\n<li>Microsoft Windows Production PCA 2011 (October 19, 2026).<\/li>\n<\/ul>\n<p>For reference, this is what each cerficate do:<\/p>\n<ul>\n<li><strong>KEK certificate:<\/strong> Trust anchor that allows updating Secure Boot signature databases (DB\/DBX).<\/li>\n<li><strong>UEFI CA certificates:<\/strong> Trust the signatures of bootloaders and firmware components (including third-party EFI applications).<\/li>\n<li><strong>Option ROM CA:<\/strong> Trusts firmware option ROM modules.<\/li>\n<li><strong>Microsoft Windows Production PCA 2011:<\/strong> Ensures that the Windows bootloader and related binaries are trusted by the firmware under Secure Boot.<\/li>\n<\/ul>\n<h2>Update Secure Boot certificates on Windows 11<\/h2>\n<p>If your certificates are nearing expiration, Microsoft and your computer manufacturer (OEM) will automatically push firmware updates or &#8220;DBX&#8221; updates through Windows Update or system updates to enroll the new 2023 CA certificates. However, you can manually update your Secure Boot.<\/p>\n<div id=\"tip-box\"><span><strong>Warning:<\/strong> Before proceeding, ensure you have a <a href=\"https:\/\/pureinfotech.com\/find-bitlocker-recovery-key-windows\/\">BitLocker recovery key<\/a> saved and your <a href=\"https:\/\/pureinfotech.com\/access-bios-uefi-windows-11\/\">BIOS (UEFI)<\/a> is up to date. If your computer&#8217;s firmware does not support the new certificates, your computer may fail to boot after the update. It&#8217;s also recommended to create a <a href=\"https:\/\/pureinfotech.com\/backup-windows-11-external-usb-drive\/\">full backup<\/a> of your computer before proceeding.<\/span><\/div>\n<p>Open <strong>PowerShell<\/strong> (admin) and run:<\/p>\n<pre>reg add HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Control\\Secureboot \/v AvailableUpdates \/t REG_DWORD \/d 0x5944 \/f<\/pre>\n<p>This command sets the registry key that instructs the operating system to deploy all required certificates (including the PCA 2023-signed boot manager).<\/p>\n<p>The value <code>0x5944<\/code> is the &#8220;full mitigation&#8221; code that enables all relevant certificate updates.<\/p>\n<p>Windows 11 has a built-in task that processes these certificate changes, and you can trigger it manually to avoid waiting 12 hours with the following command:<\/p>\n<pre>Start-ScheduledTask -TaskName \"\\Microsoft\\Windows\\PI\\Secure-Boot-Update\"<\/pre>\n<figure id=\"attachment_184471\"  class=\"wp-caption alignnone\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" class=\"size-full wp-image-184471\" src=\"https:\/\/i0.wp.com\/pureinfotech.com\/wp-content\/uploads\/2026\/01\/powersehll-update-update-secure-boot-cert.webp?resize=754%2C305&#038;quality=78&#038;strip=all&#038;ssl=1\" alt=\"PowerShell updates Secure Boot cert\" width=\"754\" height=\"305\" srcset=\"https:\/\/i0.wp.com\/pureinfotech.com\/wp-content\/uploads\/2026\/01\/powersehll-update-update-secure-boot-cert.webp?w=754&amp;quality=78&amp;strip=all&amp;ssl=1 754w, https:\/\/i0.wp.com\/pureinfotech.com\/wp-content\/uploads\/2026\/01\/powersehll-update-update-secure-boot-cert.webp?resize=300%2C121&amp;quality=78&amp;strip=all&amp;ssl=1 300w, https:\/\/i0.wp.com\/pureinfotech.com\/wp-content\/uploads\/2026\/01\/powersehll-update-update-secure-boot-cert.webp?resize=150%2C61&amp;quality=78&amp;strip=all&amp;ssl=1 150w\" sizes=\"auto, (max-width: 754px) 100vw, 754px\" \/><figcaption class=\"wp-caption-text\">PowerShell updates Secure Boot cert \/ Image: Mauro Huculak<\/figcaption><\/figure>\n<p>The update typically requires two reboots to fully apply. After the first reboot, the system updates the boot manager. After the second, it finalizes the certificate enrollment in the UEFI database.<\/p>\n<p>After your reboots, you can verify whether &#8220;UEFI CA 2023&#8221; is now present in your database by running this <strong>PowerShell<\/strong> command (as admin):<\/p>\n<pre>[System.Text.Encoding]::ASCII.GetString((Get-SecureBootUEFI db).bytes) -match 'Windows UEFI CA 2023'<\/pre>\n<ul>\n<li><strong>True:<\/strong> Your system is now secured with the new certificates.<\/li>\n<li><strong>False:<\/strong> If it remains false after several reboots, the motherboard firmware may be too old to accept the new certificate format. Check your manufacturer&#8217;s website for a &#8220;Secure Boot&#8221; related BIOS update.<\/li>\n<\/ul>\n<p>If BitLocker is active, you may need to <a href=\"https:\/\/pureinfotech.com\/disable-suspend-bitlocker-windows-11\/\">disable the encryption<\/a> temporarily (<code>Suspend-BitLocker -MountPoint \"C:\" -RebootCount 2<\/code>) before the firmware can successfully write the new keys to the device.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Secure Boot certificates expire in June 2026, and here&#8217;s how to check, update, and secure your computer to avoid boot or security issues.<\/p>\n","protected":false},"author":2,"featured_media":184468,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"jetpack_post_was_ever_published":false,"footnotes":""},"categories":[2426,23],"tags":[2715],"class_list":["post-184459","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-features","category-windows","tag-windows-11"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.2 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Microsoft replaces expiring Secure Boot certificates on Windows 11 \u2013 All details and how to update yours - Pureinfotech<\/title>\n<meta name=\"description\" content=\"Windows 11 Secure Boot certificates expire in June 2026. Learn how to check, update, and secure your PC to avoid boot or security issues.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/pureinfotech.com\/windows-11-secure-boot-certificates-expiring-june-2026\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Microsoft is gradually replacing expiring Secure Boot certs to prevent issues after June 2026 on Windows 11\" \/>\n<meta property=\"og:description\" content=\"Windows 11 Secure Boot certificates expire in June 2026. Learn how to check, update, and secure your PC to avoid boot or security issues.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/pureinfotech.com\/windows-11-secure-boot-certificates-expiring-june-2026\/\" \/>\n<meta property=\"og:site_name\" content=\"Pureinfotech \u2022 Windows 10 &amp; Windows 11 help for humans\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/facebook.com\/pureinfotech\" \/>\n<meta property=\"article:published_time\" content=\"2026-01-15T16:22:53+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-01-17T21:44:12+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/pureinfotech.com\/wp-content\/uploads\/2026\/01\/windows-11-secure-boot-certification-expiration-update-hero.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"1680\" \/>\n\t<meta property=\"og:image:height\" content=\"1050\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"author\" content=\"Mauro Huculak\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:title\" content=\"Microsoft starts phased Secure Boot updates \u2013 how to verify and manually update on Windows 11\" \/>\n<meta name=\"twitter:description\" content=\"Windows 11 Secure Boot certificates expire in June 2026. Learn how to check, update, and secure your PC to avoid boot or security issues.\" \/>\n<meta name=\"twitter:creator\" content=\"@Pureinfotech\" \/>\n<meta name=\"twitter:site\" content=\"@Pureinfotech\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Mauro Huculak\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"TechArticle\",\"@id\":\"https:\/\/pureinfotech.com\/windows-11-secure-boot-certificates-expiring-june-2026\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/pureinfotech.com\/windows-11-secure-boot-certificates-expiring-june-2026\/\"},\"author\":{\"name\":\"Mauro Huculak\",\"@id\":\"https:\/\/pureinfotech.com\/#\/schema\/person\/bf4921a81eb4380865af70691a93af43\"},\"headline\":\"Microsoft replaces expiring Secure Boot certificates on Windows 11 \u2013 All details and how to update yours\",\"datePublished\":\"2026-01-15T16:22:53+00:00\",\"dateModified\":\"2026-01-17T21:44:12+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/pureinfotech.com\/windows-11-secure-boot-certificates-expiring-june-2026\/\"},\"wordCount\":933,\"publisher\":{\"@id\":\"https:\/\/pureinfotech.com\/#organization\"},\"image\":{\"@id\":\"https:\/\/pureinfotech.com\/windows-11-secure-boot-certificates-expiring-june-2026\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/i0.wp.com\/pureinfotech.com\/wp-content\/uploads\/2026\/01\/windows-11-secure-boot-certification-expiration-update-hero.webp?fit=1680%2C1050&quality=78&strip=all&ssl=1\",\"keywords\":[\"Windows 11\"],\"articleSection\":[\"Features\",\"Windows\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/pureinfotech.com\/windows-11-secure-boot-certificates-expiring-june-2026\/\",\"url\":\"https:\/\/pureinfotech.com\/windows-11-secure-boot-certificates-expiring-june-2026\/\",\"name\":\"Microsoft replaces expiring Secure Boot certificates on Windows 11 \u2013 All details and how to update yours - Pureinfotech\",\"isPartOf\":{\"@id\":\"https:\/\/pureinfotech.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/pureinfotech.com\/windows-11-secure-boot-certificates-expiring-june-2026\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/pureinfotech.com\/windows-11-secure-boot-certificates-expiring-june-2026\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/i0.wp.com\/pureinfotech.com\/wp-content\/uploads\/2026\/01\/windows-11-secure-boot-certification-expiration-update-hero.webp?fit=1680%2C1050&quality=78&strip=all&ssl=1\",\"datePublished\":\"2026-01-15T16:22:53+00:00\",\"dateModified\":\"2026-01-17T21:44:12+00:00\",\"description\":\"Windows 11 Secure Boot certificates expire in June 2026. Learn how to check, update, and secure your PC to avoid boot or security issues.\",\"breadcrumb\":{\"@id\":\"https:\/\/pureinfotech.com\/windows-11-secure-boot-certificates-expiring-june-2026\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/pureinfotech.com\/windows-11-secure-boot-certificates-expiring-june-2026\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/pureinfotech.com\/windows-11-secure-boot-certificates-expiring-june-2026\/#primaryimage\",\"url\":\"https:\/\/i0.wp.com\/pureinfotech.com\/wp-content\/uploads\/2026\/01\/windows-11-secure-boot-certification-expiration-update-hero.webp?fit=1680%2C1050&quality=78&strip=all&ssl=1\",\"contentUrl\":\"https:\/\/i0.wp.com\/pureinfotech.com\/wp-content\/uploads\/2026\/01\/windows-11-secure-boot-certification-expiration-update-hero.webp?fit=1680%2C1050&quality=78&strip=all&ssl=1\",\"width\":1680,\"height\":1050,\"caption\":\"Secure Boot cert expiration update \/ Image: Mauro Huculak\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/pureinfotech.com\/windows-11-secure-boot-certificates-expiring-june-2026\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/pureinfotech.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Microsoft replaces expiring Secure Boot certificates on Windows 11 \u2013 All details and how to update yours\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/pureinfotech.com\/#website\",\"url\":\"https:\/\/pureinfotech.com\/\",\"name\":\"Pureinfotech \u2022 Windows 10 &amp; Windows 11 help for humans\",\"description\":\"Pureinfotech is the best site to get Windows help \u2013 featuring friendly how-to guides on Windows 10, Windows 11, Xbox, and other things tech, news, deals, reviews, and more.\",\"publisher\":{\"@id\":\"https:\/\/pureinfotech.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/pureinfotech.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/pureinfotech.com\/#organization\",\"name\":\"Pureinfotech\",\"url\":\"https:\/\/pureinfotech.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/pureinfotech.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/i0.wp.com\/pureinfotech.com\/wp-content\/uploads\/2019\/05\/pure-logo-v45.png?fit=192%2C192&quality=78&strip=all&ssl=1\",\"contentUrl\":\"https:\/\/i0.wp.com\/pureinfotech.com\/wp-content\/uploads\/2019\/05\/pure-logo-v45.png?fit=192%2C192&quality=78&strip=all&ssl=1\",\"width\":192,\"height\":192,\"caption\":\"Pureinfotech\"},\"image\":{\"@id\":\"https:\/\/pureinfotech.com\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/facebook.com\/pureinfotech\",\"https:\/\/x.com\/Pureinfotech\",\"https:\/\/www.youtube.com\/user\/Pureinfotech\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/pureinfotech.com\/#\/schema\/person\/bf4921a81eb4380865af70691a93af43\",\"name\":\"Mauro Huculak\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/secure.gravatar.com\/avatar\/1cbac450402490f703560c52c3114f3e5ab02a741684eb73917885ae4a117a16?s=96&d=mm&r=g\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/1cbac450402490f703560c52c3114f3e5ab02a741684eb73917885ae4a117a16?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/1cbac450402490f703560c52c3114f3e5ab02a741684eb73917885ae4a117a16?s=96&d=mm&r=g\",\"caption\":\"Mauro Huculak\"},\"description\":\"Mauro Huculak is a Windows How-To Expert and founder of Pureinfotech (est. 2010). With over 21 years as a technology writer and IT Specialist, Mauro specializes in Windows, software, and cross-platform systems such as Linux, Android, and macOS. Certifications he holds include Microsoft Certified Solutions Associate (MCSA), Cisco Certified Network Professional (CCNP), VMware Certified Professional (VCP), and CompTIA A+ and Network+. Mauro is a recognized Microsoft MVP and has also been a long-time contributor to Windows Central. You can follow him on YouTube, Threads, BlueSky, X (Twitter), LinkedIn and About.me. Email him at Contact@Pureinfotech.com.\",\"sameAs\":[\"https:\/\/pureinfotech.com\",\"https:\/\/x.com\/@Pureinfotech\"],\"url\":\"https:\/\/pureinfotech.com\/mauro-huculak\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Microsoft replaces expiring Secure Boot certificates on Windows 11 \u2013 All details and how to update yours - Pureinfotech","description":"Windows 11 Secure Boot certificates expire in June 2026. Learn how to check, update, and secure your PC to avoid boot or security issues.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/pureinfotech.com\/windows-11-secure-boot-certificates-expiring-june-2026\/","og_locale":"en_US","og_type":"article","og_title":"Microsoft is gradually replacing expiring Secure Boot certs to prevent issues after June 2026 on Windows 11","og_description":"Windows 11 Secure Boot certificates expire in June 2026. Learn how to check, update, and secure your PC to avoid boot or security issues.","og_url":"https:\/\/pureinfotech.com\/windows-11-secure-boot-certificates-expiring-june-2026\/","og_site_name":"Pureinfotech \u2022 Windows 10 &amp; Windows 11 help for humans","article_publisher":"https:\/\/facebook.com\/pureinfotech","article_published_time":"2026-01-15T16:22:53+00:00","article_modified_time":"2026-01-17T21:44:12+00:00","og_image":[{"width":1680,"height":1050,"url":"https:\/\/pureinfotech.com\/wp-content\/uploads\/2026\/01\/windows-11-secure-boot-certification-expiration-update-hero.webp","type":"image\/webp"}],"author":"Mauro Huculak","twitter_card":"summary_large_image","twitter_title":"Microsoft starts phased Secure Boot updates \u2013 how to verify and manually update on Windows 11","twitter_description":"Windows 11 Secure Boot certificates expire in June 2026. Learn how to check, update, and secure your PC to avoid boot or security issues.","twitter_creator":"@Pureinfotech","twitter_site":"@Pureinfotech","twitter_misc":{"Written by":"Mauro Huculak","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"TechArticle","@id":"https:\/\/pureinfotech.com\/windows-11-secure-boot-certificates-expiring-june-2026\/#article","isPartOf":{"@id":"https:\/\/pureinfotech.com\/windows-11-secure-boot-certificates-expiring-june-2026\/"},"author":{"name":"Mauro Huculak","@id":"https:\/\/pureinfotech.com\/#\/schema\/person\/bf4921a81eb4380865af70691a93af43"},"headline":"Microsoft replaces expiring Secure Boot certificates on Windows 11 \u2013 All details and how to update yours","datePublished":"2026-01-15T16:22:53+00:00","dateModified":"2026-01-17T21:44:12+00:00","mainEntityOfPage":{"@id":"https:\/\/pureinfotech.com\/windows-11-secure-boot-certificates-expiring-june-2026\/"},"wordCount":933,"publisher":{"@id":"https:\/\/pureinfotech.com\/#organization"},"image":{"@id":"https:\/\/pureinfotech.com\/windows-11-secure-boot-certificates-expiring-june-2026\/#primaryimage"},"thumbnailUrl":"https:\/\/i0.wp.com\/pureinfotech.com\/wp-content\/uploads\/2026\/01\/windows-11-secure-boot-certification-expiration-update-hero.webp?fit=1680%2C1050&quality=78&strip=all&ssl=1","keywords":["Windows 11"],"articleSection":["Features","Windows"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/pureinfotech.com\/windows-11-secure-boot-certificates-expiring-june-2026\/","url":"https:\/\/pureinfotech.com\/windows-11-secure-boot-certificates-expiring-june-2026\/","name":"Microsoft replaces expiring Secure Boot certificates on Windows 11 \u2013 All details and how to update yours - Pureinfotech","isPartOf":{"@id":"https:\/\/pureinfotech.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/pureinfotech.com\/windows-11-secure-boot-certificates-expiring-june-2026\/#primaryimage"},"image":{"@id":"https:\/\/pureinfotech.com\/windows-11-secure-boot-certificates-expiring-june-2026\/#primaryimage"},"thumbnailUrl":"https:\/\/i0.wp.com\/pureinfotech.com\/wp-content\/uploads\/2026\/01\/windows-11-secure-boot-certification-expiration-update-hero.webp?fit=1680%2C1050&quality=78&strip=all&ssl=1","datePublished":"2026-01-15T16:22:53+00:00","dateModified":"2026-01-17T21:44:12+00:00","description":"Windows 11 Secure Boot certificates expire in June 2026. Learn how to check, update, and secure your PC to avoid boot or security issues.","breadcrumb":{"@id":"https:\/\/pureinfotech.com\/windows-11-secure-boot-certificates-expiring-june-2026\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/pureinfotech.com\/windows-11-secure-boot-certificates-expiring-june-2026\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/pureinfotech.com\/windows-11-secure-boot-certificates-expiring-june-2026\/#primaryimage","url":"https:\/\/i0.wp.com\/pureinfotech.com\/wp-content\/uploads\/2026\/01\/windows-11-secure-boot-certification-expiration-update-hero.webp?fit=1680%2C1050&quality=78&strip=all&ssl=1","contentUrl":"https:\/\/i0.wp.com\/pureinfotech.com\/wp-content\/uploads\/2026\/01\/windows-11-secure-boot-certification-expiration-update-hero.webp?fit=1680%2C1050&quality=78&strip=all&ssl=1","width":1680,"height":1050,"caption":"Secure Boot cert expiration update \/ Image: Mauro Huculak"},{"@type":"BreadcrumbList","@id":"https:\/\/pureinfotech.com\/windows-11-secure-boot-certificates-expiring-june-2026\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/pureinfotech.com\/"},{"@type":"ListItem","position":2,"name":"Microsoft replaces expiring Secure Boot certificates on Windows 11 \u2013 All details and how to update yours"}]},{"@type":"WebSite","@id":"https:\/\/pureinfotech.com\/#website","url":"https:\/\/pureinfotech.com\/","name":"Pureinfotech \u2022 Windows 10 &amp; Windows 11 help for humans","description":"Pureinfotech is the best site to get Windows help \u2013 featuring friendly how-to guides on Windows 10, Windows 11, Xbox, and other things tech, news, deals, reviews, and more.","publisher":{"@id":"https:\/\/pureinfotech.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/pureinfotech.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/pureinfotech.com\/#organization","name":"Pureinfotech","url":"https:\/\/pureinfotech.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/pureinfotech.com\/#\/schema\/logo\/image\/","url":"https:\/\/i0.wp.com\/pureinfotech.com\/wp-content\/uploads\/2019\/05\/pure-logo-v45.png?fit=192%2C192&quality=78&strip=all&ssl=1","contentUrl":"https:\/\/i0.wp.com\/pureinfotech.com\/wp-content\/uploads\/2019\/05\/pure-logo-v45.png?fit=192%2C192&quality=78&strip=all&ssl=1","width":192,"height":192,"caption":"Pureinfotech"},"image":{"@id":"https:\/\/pureinfotech.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/facebook.com\/pureinfotech","https:\/\/x.com\/Pureinfotech","https:\/\/www.youtube.com\/user\/Pureinfotech"]},{"@type":"Person","@id":"https:\/\/pureinfotech.com\/#\/schema\/person\/bf4921a81eb4380865af70691a93af43","name":"Mauro Huculak","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/1cbac450402490f703560c52c3114f3e5ab02a741684eb73917885ae4a117a16?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/1cbac450402490f703560c52c3114f3e5ab02a741684eb73917885ae4a117a16?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/1cbac450402490f703560c52c3114f3e5ab02a741684eb73917885ae4a117a16?s=96&d=mm&r=g","caption":"Mauro Huculak"},"description":"Mauro Huculak is a Windows How-To Expert and founder of Pureinfotech (est. 2010). With over 21 years as a technology writer and IT Specialist, Mauro specializes in Windows, software, and cross-platform systems such as Linux, Android, and macOS. Certifications he holds include Microsoft Certified Solutions Associate (MCSA), Cisco Certified Network Professional (CCNP), VMware Certified Professional (VCP), and CompTIA A+ and Network+. Mauro is a recognized Microsoft MVP and has also been a long-time contributor to Windows Central. You can follow him on YouTube, Threads, BlueSky, X (Twitter), LinkedIn and About.me. Email him at Contact@Pureinfotech.com.","sameAs":["https:\/\/pureinfotech.com","https:\/\/x.com\/@Pureinfotech"],"url":"https:\/\/pureinfotech.com\/mauro-huculak"}]}},"jetpack_featured_media_url":"https:\/\/i0.wp.com\/pureinfotech.com\/wp-content\/uploads\/2026\/01\/windows-11-secure-boot-certification-expiration-update-hero.webp?fit=1680%2C1050&quality=78&strip=all&ssl=1","jetpack-related-posts":[{"id":185567,"url":"https:\/\/pureinfotech.com\/check-secure-boot-certificates-expiration-windows-11\/","url_meta":{"origin":184459,"position":0},"title":"How to check if your PC has the updated Secure Boot certificates on Windows 11, 10","author":"Mauro Huculak","date":"February 18, 2026","format":false,"excerpt":"Does your PC have the updated Secure Boot certificates? Here's how to check on Windows 11.","rel":"","context":"","block_context":{"text":"Features","link":"https:\/\/pureinfotech.com\/category\/features\/"},"img":{"alt_text":"Secure Boot check certs \/ Image: Mauro Huculak","src":"https:\/\/i0.wp.com\/pureinfotech.com\/wp-content\/uploads\/2026\/02\/windows-11-check-secure-boot-certs-hero.webp?fit=1200%2C750&quality=78&strip=all&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/pureinfotech.com\/wp-content\/uploads\/2026\/02\/windows-11-check-secure-boot-certs-hero.webp?fit=1200%2C750&quality=78&strip=all&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/pureinfotech.com\/wp-content\/uploads\/2026\/02\/windows-11-check-secure-boot-certs-hero.webp?fit=1200%2C750&quality=78&strip=all&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/pureinfotech.com\/wp-content\/uploads\/2026\/02\/windows-11-check-secure-boot-certs-hero.webp?fit=1200%2C750&quality=78&strip=all&ssl=1&resize=700%2C400 2x, https:\/\/i0.wp.com\/pureinfotech.com\/wp-content\/uploads\/2026\/02\/windows-11-check-secure-boot-certs-hero.webp?fit=1200%2C750&quality=78&strip=all&ssl=1&resize=1050%2C600 3x"},"classes":[]},{"id":185353,"url":"https:\/\/pureinfotech.com\/security-risks-secure-boot-certificates-expiring-2026-windows-11\/","url_meta":{"origin":184459,"position":1},"title":"Microsoft explains the security risks of Secure Boot certificates expiring in 2026 on Windows 11","author":"Mauro Huculak","date":"February 11, 2026","format":false,"excerpt":"A major firmware-level security refresh is rolling out to Windows 11 and 10 devices ahead of Secure Boot\u2019s 2026 deadline.","rel":"","context":"","block_context":{"text":"News","link":"https:\/\/pureinfotech.com\/category\/news\/"},"img":{"alt_text":"Secure Boot certs expiration in 2026","src":"https:\/\/i0.wp.com\/pureinfotech.com\/wp-content\/uploads\/2026\/02\/secure-boot-cert-expire-2026-hero.webp?fit=1200%2C750&quality=78&strip=all&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/pureinfotech.com\/wp-content\/uploads\/2026\/02\/secure-boot-cert-expire-2026-hero.webp?fit=1200%2C750&quality=78&strip=all&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/pureinfotech.com\/wp-content\/uploads\/2026\/02\/secure-boot-cert-expire-2026-hero.webp?fit=1200%2C750&quality=78&strip=all&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/pureinfotech.com\/wp-content\/uploads\/2026\/02\/secure-boot-cert-expire-2026-hero.webp?fit=1200%2C750&quality=78&strip=all&ssl=1&resize=700%2C400 2x, https:\/\/i0.wp.com\/pureinfotech.com\/wp-content\/uploads\/2026\/02\/secure-boot-cert-expire-2026-hero.webp?fit=1200%2C750&quality=78&strip=all&ssl=1&resize=1050%2C600 3x"},"classes":[]},{"id":185608,"url":"https:\/\/pureinfotech.com\/install-secure-boot-certificates-windows-11\/","url_meta":{"origin":184459,"position":2},"title":"How to install the 2023 Secure Boot certificates on Windows 11 (and 10) before the 2026 expiration","author":"Mauro Huculak","date":"February 19, 2026","format":false,"excerpt":"Your Windows 11 PC could face problems if Secure Boot certificates expire. Learn how to check and install the 2023 certificates manually.","rel":"","context":"","block_context":{"text":"Windows","link":"https:\/\/pureinfotech.com\/category\/windows\/"},"img":{"alt_text":"Secure Boot certs 2023 update","src":"https:\/\/i0.wp.com\/pureinfotech.com\/wp-content\/uploads\/2026\/02\/windows-11-secure-boot-update-certs-2023-hero.webp?fit=1200%2C750&quality=78&strip=all&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/pureinfotech.com\/wp-content\/uploads\/2026\/02\/windows-11-secure-boot-update-certs-2023-hero.webp?fit=1200%2C750&quality=78&strip=all&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/pureinfotech.com\/wp-content\/uploads\/2026\/02\/windows-11-secure-boot-update-certs-2023-hero.webp?fit=1200%2C750&quality=78&strip=all&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/pureinfotech.com\/wp-content\/uploads\/2026\/02\/windows-11-secure-boot-update-certs-2023-hero.webp?fit=1200%2C750&quality=78&strip=all&ssl=1&resize=700%2C400 2x, https:\/\/i0.wp.com\/pureinfotech.com\/wp-content\/uploads\/2026\/02\/windows-11-secure-boot-update-certs-2023-hero.webp?fit=1200%2C750&quality=78&strip=all&ssl=1&resize=1050%2C600 3x"},"classes":[]},{"id":186233,"url":"https:\/\/pureinfotech.com\/kb5079466-build-28000-1719-for-windows-11-26h1\/","url_meta":{"origin":184459,"position":3},"title":"KB5079466 (build 28000.1719) for Windows 11 26H1 drops as the March 2026 update","author":"Mauro Huculak","date":"March 13, 2026","format":false,"excerpt":"The March 2026 update for version 26H1 is out, but it's for a version of Windows 11 that virtually no device is getting.","rel":"","context":"","block_context":{"text":"News","link":"https:\/\/pureinfotech.com\/category\/news\/"},"img":{"alt_text":"Windows 11 KB5079466","src":"https:\/\/i0.wp.com\/pureinfotech.com\/wp-content\/uploads\/2026\/03\/kb5079466-windows-11-26h1-hero.webp?fit=1200%2C750&quality=78&strip=all&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/pureinfotech.com\/wp-content\/uploads\/2026\/03\/kb5079466-windows-11-26h1-hero.webp?fit=1200%2C750&quality=78&strip=all&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/pureinfotech.com\/wp-content\/uploads\/2026\/03\/kb5079466-windows-11-26h1-hero.webp?fit=1200%2C750&quality=78&strip=all&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/pureinfotech.com\/wp-content\/uploads\/2026\/03\/kb5079466-windows-11-26h1-hero.webp?fit=1200%2C750&quality=78&strip=all&ssl=1&resize=700%2C400 2x, https:\/\/i0.wp.com\/pureinfotech.com\/wp-content\/uploads\/2026\/03\/kb5079466-windows-11-26h1-hero.webp?fit=1200%2C750&quality=78&strip=all&ssl=1&resize=1050%2C600 3x"},"classes":[]},{"id":185312,"url":"https:\/\/pureinfotech.com\/kb5075912-windows-10-esu-february-2026-update\/","url_meta":{"origin":184459,"position":4},"title":"KB5075912 (build 19045.6937) for Windows 10 ESU drops as the February 2026 update","author":"Mauro Huculak","date":"February 10, 2026","format":false,"excerpt":"Microsoft rolls out the fourth Patch Tuesday Extended Security Update for Windows 10 with some fixes.","rel":"","context":"","block_context":{"text":"News","link":"https:\/\/pureinfotech.com\/category\/news\/"},"img":{"alt_text":"Windows 10 KB5075912","src":"https:\/\/i0.wp.com\/pureinfotech.com\/wp-content\/uploads\/2026\/02\/kb5075912-windows-10-february-update-hero.webp?fit=1200%2C750&quality=78&strip=all&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/pureinfotech.com\/wp-content\/uploads\/2026\/02\/kb5075912-windows-10-february-update-hero.webp?fit=1200%2C750&quality=78&strip=all&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/pureinfotech.com\/wp-content\/uploads\/2026\/02\/kb5075912-windows-10-february-update-hero.webp?fit=1200%2C750&quality=78&strip=all&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/pureinfotech.com\/wp-content\/uploads\/2026\/02\/kb5075912-windows-10-february-update-hero.webp?fit=1200%2C750&quality=78&strip=all&ssl=1&resize=700%2C400 2x, https:\/\/i0.wp.com\/pureinfotech.com\/wp-content\/uploads\/2026\/02\/kb5075912-windows-10-february-update-hero.webp?fit=1200%2C750&quality=78&strip=all&ssl=1&resize=1050%2C600 3x"},"classes":[]},{"id":186133,"url":"https:\/\/pureinfotech.com\/kb5078885-build-19045-7058-windows-10-esu\/","url_meta":{"origin":184459,"position":5},"title":"KB5078885 (build 19045.7058) for Windows 10 ESU drops as the March 2026 update","author":"Mauro Huculak","date":"March 10, 2026","format":false,"excerpt":"Microsoft rolls out the March Patch Tuesday Extended Security Update for Windows 10 with some fixes.","rel":"","context":"","block_context":{"text":"News","link":"https:\/\/pureinfotech.com\/category\/news\/"},"img":{"alt_text":"Windows 10 KB5078885","src":"https:\/\/i0.wp.com\/pureinfotech.com\/wp-content\/uploads\/2026\/03\/windows-10-esu-kb5078885-hero.webp?fit=1200%2C750&quality=78&strip=all&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/pureinfotech.com\/wp-content\/uploads\/2026\/03\/windows-10-esu-kb5078885-hero.webp?fit=1200%2C750&quality=78&strip=all&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/pureinfotech.com\/wp-content\/uploads\/2026\/03\/windows-10-esu-kb5078885-hero.webp?fit=1200%2C750&quality=78&strip=all&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/pureinfotech.com\/wp-content\/uploads\/2026\/03\/windows-10-esu-kb5078885-hero.webp?fit=1200%2C750&quality=78&strip=all&ssl=1&resize=700%2C400 2x, https:\/\/i0.wp.com\/pureinfotech.com\/wp-content\/uploads\/2026\/03\/windows-10-esu-kb5078885-hero.webp?fit=1200%2C750&quality=78&strip=all&ssl=1&resize=1050%2C600 3x"},"classes":[]}],"_links":{"self":[{"href":"https:\/\/pureinfotech.com\/wp-json\/wp\/v2\/posts\/184459","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/pureinfotech.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/pureinfotech.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/pureinfotech.com\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/pureinfotech.com\/wp-json\/wp\/v2\/comments?post=184459"}],"version-history":[{"count":2,"href":"https:\/\/pureinfotech.com\/wp-json\/wp\/v2\/posts\/184459\/revisions"}],"predecessor-version":[{"id":184550,"href":"https:\/\/pureinfotech.com\/wp-json\/wp\/v2\/posts\/184459\/revisions\/184550"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/pureinfotech.com\/wp-json\/wp\/v2\/media\/184468"}],"wp:attachment":[{"href":"https:\/\/pureinfotech.com\/wp-json\/wp\/v2\/media?parent=184459"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/pureinfotech.com\/wp-json\/wp\/v2\/categories?post=184459"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/pureinfotech.com\/wp-json\/wp\/v2\/tags?post=184459"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}