Blog Post

Explore Secure Boot certificate update guidance for Windows client devices

Windows IT Pro Blog

9 MIN READ

Secure Boot playbook for certificates expiring in 2026

Ashis_Chatterjee

Microsoft

Nov 13, 2025

Next up: April 23 - Ask Microsoft Anything (AMA) about Secure Boot The first set of tools and steps are now available to help you proactively update your Secure Boot certificates before they s...

Updated Mar 16, 2026

Version 19.0

Secure Boot AMA - February 5 2026.ics4 KB

security

servicing and updates

Ashis_Chatterjee

Microsoft

Joined June 20, 2025

View Profile

Windows IT Pro Blog

Follow this blog board to get notified when there's new activity

Gunnar-Haslinger

Steel Contributor

Nov 16, 2025

Adding the new 2023 DB Certificates works fine, but adding the new 2023 KEK Certificate fails on all hardware devices and even in HyperV-VMs tested so far. I wrote a quick write-up how to check and test with Powershell in a few lines of code: https://hitco.at/blog/uefi-secureboot-db-update-installieren/