Microsoft to Update Secure Boot Certificates on Most Windows PCs as 2011 Versions Expire in June

Microsoft is changing Windows on almost all PCs by installing new Secure Boot certificates as the original ones from 2011 start to expire in late June. Secure Boot relies on certificates installed on PCs, and new certificates will install automatically onto most PCs.

However, hundreds of millions of users will be at immediate risk without new certificates, including all Windows 10 users except those enrolled for extended support updates.

The ESU program is currently live until October. Last month’s Windows security updates installed new certificates and a status update to confirm PCs are secure. The slow decline of outdated Windows versions continues as Microsoft confronts expiring Secure Boot certificates for the first time ever.

Microsoft says this helps reduce the risk of malware and cybersecurity attacks by providing access to critical and important security updates, but only security updates, nothing else. The timing of the certificate expiration comes just months after the Windows 10 OS expired.