technology
Microsoft to Update Secure Boot Certificates on Most Windows PCs as 2011 Versions Expire in June
Microsoft is set to automatically install new Secure Boot certificates on most Windows PCs as the original 2011 certificates begin expiring in late June. Hundreds of millions of users, particularly those on Windows 10 without extended support, face immediate risks without the updates. The move follows last month's security patches that included new certificates for many systems.
ForbesAudio version
Tap play to generate a narrated version.
Developing·Limited corroboration so far. This page will refresh as more sources emerge.
Microsoft is changing Windows on almost all PCs by installing new Secure Boot certificates as the original ones from 2011 start to expire in late June. Secure Boot relies on certificates installed on PCs, and new certificates will install automatically onto most PCs.
However, hundreds of millions of users will be at immediate risk without new certificates, including all Windows 10 users except those enrolled for extended support updates.
The ESU program is currently live until October. Last month’s Windows security updates installed new certificates and a status update to confirm PCs are secure. The slow decline of outdated Windows versions continues as Microsoft confronts expiring Secure Boot certificates for the first time ever.
Microsoft says this helps reduce the risk of malware and cybersecurity attacks by providing access to critical and important security updates, but only security updates, nothing else. The timing of the certificate expiration comes just months after the Windows 10 OS expired.
