Blog Post

Windows IT Pro Blog

8 MIN READ

Secure Boot playbook for certificates expiring in 2026

Ashis_Chatterjee

Microsoft

Nov 13, 2025

Ask Microsoft Anything (AMA) about Secure Boot - February 5 - 8:00 AM PST The first set of tools and steps are now available to help you proactively update your Secure Boot certificates befor...

Updated Jan 22, 2026

Version 13.0

Secure Boot AMA - February 5 2026.ics4 KB

security

servicing and updates

Ashis_Chatterjee

Microsoft

Joined June 20, 2025

View Profile

Windows IT Pro Blog

Follow this blog board to get notified when there's new activity

Gunnar-Haslinger

Iron Contributor

Nov 16, 2025

Adding the new 2023 DB Certificates works fine, but adding the new 2023 KEK Certificate fails on all hardware devices and even in HyperV-VMs tested so far. I wrote a quick write-up how to check and test with Powershell in a few lines of code: https://hitco.at/blog/uefi-secureboot-db-update-installieren/