The 15-Year Deadline: Microsoft Launches Massive “Secure Boot” Certificate Rotation Ahead of June 2026
Do Son 
Revamped "Start" Menu Interface
According to a support advisory released by Microsoft, the digital certificates for UEFI Secure Boot are slated to expire in June 2026. In anticipation of this deadline, the corporation has commenced the systematic rotation of these certificates via cumulative updates, ensuring that all afflicted systems receive the refreshed credentials prior to the June threshold.
The gravity of this update is commensurate with that of a critical security patch. Microsoft originally inaugurated these UEFI Secure Boot certificates during the Windows 8 era in 2011; with a fifteen-year tenure, their validity culminates in June 2026. Should a device fail to receive these updates—either due to the deliberate deactivation of system updates or the utilization of a Windows 10 iteration that no longer receives support—the equipment will be rendered vulnerable to significant security hazards upon the certificate’s expiration.
While an expired certificate will not precipitate a total systemic failure, software contingent upon Secure Boot may cease to function correctly. Over time, this will likely manifest as profound compatibility impediments, as contemporary operating systems, firmware, hardware, and security-dependent applications may fail to initialize. Since January 2026, Microsoft has been disseminating the new certificates to select Windows 11 (24H2/25H2) devices, with plans to progressively extend this replacement to Windows 10, Windows 11, and other supported products.
Consequently, for the general user, maintaining a routine update cadence is sufficient, necessitating no further intervention. However, if a system has reached its End of Life (EOL) and no longer qualifies for updates, the certificate cannot be renewed. Within corporate environments where certain hardware may elude automated update cycles, IT administrators must intervene manually, employing Microsoft’s specialized scripts to facilitate the certificate rotation.
Related Posts:
Support Our Threat Intelligence
If you find our CVE report and cybersecurity news helpful, consider supporting our work.
Buy Me a Coffee
PayPal
