Ask Microsoft Anything: Secure Boot - Windows Tech Community

Event details

Ask Microsoft Anything (AMA) about updating Secure Boot certificates on your Windows devices before they expire in June of 2026. We recently published the first version of the Secure Boot playbook, o...

Heather_Poulsen

Updated Dec 09, 2025

AMA

AlexHellen

Occasional Reader

Dec 10, 2025

If a Device is new i.e a Surface Pro 10. should we expect it has a certificate then no need to update? what value should we except?

if availableupdates is set to 0x0

UEFICA2023Status - notstarted

prabhv1982
Microsoft
Dec 11, 2025
Surface Pro 10 for business and Surface Pro 10 with 5G come default with the updated certificates. You can refer to Surface Secure Boot Certificates - Microsoft Support for details on surface devices that come with updated certificates pre-installed in UEFI. You can review the TPM-WMI event 1808 (This event means device has all certificates) or 1801 (Means device is missing certs and need to be updated) in System event log. Refer to Secure Boot Certificate updates: Guidance for IT professionals and organizations - Microsoft Support for details on how to monitor if device has updated certificates.