June 4 - Secure Boot AMA

Microsoft is updating the Secure Boot certificates originally issued in 2011 to ensure Windows devices continue to verify trusted boot software. These older certificates begin expiring in June 2026. Devices that haven’t received the newer 2023 certificates will continue to start and operate normally, and standard Windows updates will continue to install. However, these devices will no longer be able to receive new security protections for the early boot process, including updates to Windows Boot Manager, Secure Boot databases, revocation lists, or mitigations for newly discovered boot level vulnerabilities. 

Whether you are already working through Secure Boot certificate updates across your estate, or aren't sure where to start, you can get answers to your questions and helpful insights at the next Secure Boot AMA on 8:00 a.m. PDT June 4, 2026. Can't attend live? No problem. Post your questions in advance. 

Visit https://aka.ms/AMA/SecureBoot to save the date and post your questions.

For detailed, step-by-step guidance, see the following resources:

• Secure Boot Playbook for Windows client
• Secure Boot playbook for Windows Server
• Secure Boot Certificate Updates for Windows 365
• Secure Boot Certificate Updates for Azure Virtual Desktop