Enterprise organizations are approaching a critical security milestone: Windows Secure Boot 2011 certificates, currently deployed across millions of devices, are scheduled to expire in June 2026. These certificates need to be replaced by the newer 2023 certificates. To help organizations prepare, Microsoft Defender is introducing a new tool that provides centralized visibility into Secure Boot 2023 certificate readiness across your device fleet.
Understanding the Secure Boot certificate challenge
Secure Boot is a foundational security feature that validates the integrity of your device's boot process, ensuring only trusted software can run...
Updated Apr 27, 2026
Version 1.0
amitcohen
Microsoft
Microsoft