Event details

Ask Microsoft Anything (AMA) about updating Secure Boot certificates on your Windows devices before they expire in June of 2026. We recently published the first version of the Secure Boot playbook, o...
Heather_Poulsen
Updated Dec 09, 2025
AMA
mace_9_8's avatar
mace_9_8
Occasional Reader
Dec 09, 2025

 

"For Windows running long term in a VM, the updates can be applied through Windows like any other devices, if the virtualized firmware supports Secure Boot updates."
- What do you mean by "Windows running long-term in a VM"
- How can I determine if my VMs are long-term?

  • prabhv1982's avatar
    prabhv1982
    Icon for Microsoft rankMicrosoft
    Dec 09, 2025

    Long running virtual machines refers VMs that have been operating for extended period for years rather than short-lived or disposable VMs used for quick testing

    Most recent Virtual machines created from up-to-date Hyper-V hosts already have the new certificates deployed.  To verify if your VM has the required Secure Boot certificate updates:

    • Refer to 

      https://aka.ms/getsecureboot ->Guidance for IT professionals and organizations -> Monitoring Event Logs section for guidance on how to determine if VM has latest certificates.