Microsoft is refreshing Secure Boot certificates to plug security holes before they happen — if you bought a PC last year, you should be set

Microsoft is updating Secure Boot certificates for Windows PCs to enhance security, with the current certificates set to expire in June 2026 after a 15-year lifespan. New certificates are being distributed through Windows updates for personal users, businesses, and schools. PCs purchased in 2025 or later likely already have the updated certificates, with OEM partners obtaining them since 2024. Users who allow Microsoft to manage updates should receive the new certificates through standard Windows updates. Failure to update certificates may lead to security vulnerabilities and compatibility issues, emphasizing the importance of running supported versions of Windows for optimal performance and protection.