Blog Post

Windows IT Pro Blog
9 MIN READ

Secure Boot playbook for certificates expiring in 2026

Ashis_Chatterjee's avatar
Ashis_Chatterjee
Icon for Microsoft rankMicrosoft
Nov 13, 2025
Watch on demand: Ask Microsoft Anything (AMA) about Secure Boot The first set of tools and steps are now available to help you proactively update your Secure Boot certificates before they start...
Updated Feb 09, 2026
Version 17.0
security
servicing and updates
David_Swenson's avatar
David_Swenson
Steel Contributor
Dec 09, 2025

Ashis_Chatterjee​, I deployed the new Settings Catalog options via Intune as described here. The deployment failed with no conflicts just error devices in Intune. 

Build 26200.7296

  1. Configure High Confidence Opt Out
    1. State = Disabled, Result = ✅ Succeeded
  2. Configure Microsoft Update Managed Opt In
    1. State = Enabled, Result = ❌ Failed
  3. Enable Secureboot Certificate Updates
    1. State = Enabled, Result = ❌ Failed