Secure Boot Certificate Expiring: What Windows Users Should Check

What is actually expiring

Secure Boot is a feature of your PC's firmware (UEFI, the modern replacement for BIOS) that only lets trusted, signed software start before Windows loads.

Will my PC stop booting?

No. Microsoft says devices without the new certificates will "still start and operate normally", and regular Windows updates will keep installing.

How to check your PC in one minute

• Press the Start button, type Windows Security and open it.
• Click Device security.
• Look at the Secure Boot section.

How the new certificates get onto your PC

You need three things:

• A supported version of Windows.
• Updates not paused.
• Secure Boot turned on.

Before you update: save your BitLocker recovery key

This is the one step worth doing today even if everything looks fine.

If Windows Security says your firmware is the problem

Some older PCs can't accept the new certificates until the manufacturer updates the BIOS/UEFI firmware.