Event details

It's time for our fourth Ask Microsoft Anything (AMA) about updating Secure Boot certificates on your Windows devices before they expire in June of 2026. If you've already bookmarked Secure Boot play...
Pearl-Angeles
Updated Apr 15, 2026
AMA
badger_bucky's avatar
badger_bucky
Copper Contributor
Apr 23, 2026

Please talk about the default versus the active database.  Specifically, what are the pitfalls in continuing to use a system that has the active database updated but does not have an available OEM update for the default database.

  • mihi's avatar
    mihi
    Brass Contributor
    Apr 23, 2026

    The risk is in somebody resetting Secure Boot to defaults in the UEFI setup and having a device that does not boot or may go through BitLocker recovery.

    As mentioned in the video, a countermeasure may be to set a Setup passsword for the UEFI setup so that end-users cannot mess with their settings.