Microsoft has recently begun replacing expiring Secure Boot certificates on eligible Windows 11 systems running 24H2 and 25H2 ...

Microsoft confirms systems without updated Secure Boot certificates will boot normally but lose some security protections.

Microsoft is rolling out "Secure Boot Allowed Key Exchange Key (KEK) Update," which requires a system reboot to finish ...

Windows 10 KB5078885 ESU out with Secure Boot 2023, replacing expiring Secure Boot certificates from 2011. But it's a staged roll out.

Make sure you've updated before the deadline.

In June 2025, Microsoft announced that, in June 2026, it would begin deprecating Secure Boot certificates of Windows systems from 2011, which were superseded by their 2023 counterparts.

Secure Boot protects modern Windows and Linux PCs. Microsoft Secure Boot certificates from 2011 expire in June 2026. Most PC owners are fine if they install the latest updates. Last year's ...

Microsoft has started automatically replacing expiring Secure Boot certificates on eligible Windows 11 24H2 and 25H2 systems. Secure Boot is a security feature that blocks malicious software (like ...

Microsoft hasn't received much love for Windows 11, with many users still reluctant to ditch Windows 10 even four years after the newer OS launched. The main reasons include Microsoft's constant push ...

Event ID 1798 occurs when an attempt is made to add the Microsoft Windows Production PCA 2011 certificate; this is an old and less secure certificate compared to UEFI CA 2023. In this post, we will ...

Find the Secure Boot option and change it to Disabled. Save the changes and reboot again. We recommend keeping Secure Boot enabled unless you're sure it needs to be disabled. This article explains how ...

If you receive Event ID 1797 in the Event log on your Windows 11/10 computer, this post will help you understand the cause, reason, and possible resolution. The Windows UEFI CA 2023 certificate and ...