Event details

It's time for our fourth Ask Microsoft Anything (AMA) about updating Secure Boot certificates on your Windows devices before they expire in June of 2026. If you've already bookmarked Secure Boot play...
Pearl-Angeles
Updated Apr 15, 2026
AMA
Brian Smith's avatar
Brian Smith
Occasional Reader
Apr 23, 2026

If the Boot Cert is not updated, and an attempt to install a CU that contains updates to the Secure Boot - will the entire CU KB fail to install?

 

  • mihi's avatar
    mihi
    Brass Contributor
    Apr 23, 2026

    No.

    • Updates to DBX will be applied after the reboot by the scheduled task anyway.
    • CUs will continue to ship two boot managers, one for 2011 cert and one for 2023 cert. The update will install the 2011 boot manager (without the new fixes) if the 2023 cert is not present.