Event details

Ask Microsoft Anything (AMA) about updating Secure Boot certificates on your Windows devices before they expire in June of 2026. We recently published the first version of the Secure Boot playbook, o...
Heather_Poulsen
Updated Dec 09, 2025
AMA
WinPE's avatar
WinPE
Occasional Reader
Dec 09, 2025

How will the WinPE boot image (from the ADK) be affected by these changes? If it will be updated, will it continue to work on systems that have not yet installed the updated certificates?

  • prabhv1982's avatar
    prabhv1982
    Icon for Microsoft rankMicrosoft
    Dec 10, 2025

    If WinPE device is updated with new Windows UEFI 2023 CA signed Boot Manager, device can only boot to this media if new certificates are already installed.  Devices that do not have new certificates in firmware will not be able to boot to this image.  Refer to https://aka.ms/getsecureboot on how to update device to new certificates