Next Secure Boot AMA: June 4 - Save the date!
The first set of tools and steps are now available to help you proactively update your Secure Boot certificates before they start expiring in June...
Updated May 29, 2026
Version 21.0
Blog Post
hello , I use an old Vaio with windows 10 and the secure boot does NOT support automatic updates.
I took a quick look at the instructions to update the certificates manually but never before I felt so incapacitated to complete a manual task as I am now.
Why doesn't microsoft provide a simple standalone install program which could help me and countless other people to stay secure? The above instructions are unmistakably impossible to complete by me.
I hope to hear from a microsoft official about this.
Thanks and best regards
Win 10 is outdated. And this blog is for IT professionals I guess, having to manage hundreds or thousands of devices. So, if you decide to go with that old hardware, only capable of running Win 10, and the certificates won't be installed automatically, you just do nothing.
If the device really won't be able to boot someday, you just deactivat Secure Boot in Bios. That's it.
MS can't trigger an automatic update on really every device, because this could lead to boot errors, if the device isn't capable of running it.
In my understanding, they slowly build up a database of more and more device type, where they are highly confident, no problems occur when installing that new certificates. If your device falls in that high confidence category, it installs the certificates automatically.