Event details

It's time for our fourth Ask Microsoft Anything (AMA) about updating Secure Boot certificates on your Windows devices before they expire in June of 2026. If you've already bookmarked Secure Boot play...
Pearl-Angeles
Updated Apr 15, 2026
AMA
jhammonds978's avatar
jhammonds978
Occasional Reader
May 15, 2026

Hello, 

Scenario: BitLocker is enable(which is using PCR 7,11 validation profile) on a PC. PC only has the 2011 certs installed and not the 2023 certs.

When the UEFI CA 2011 expire in June 2026, will this cause:

  • PC to fail to boot in to windows?
  • PC to fail secure boot validation and PCR 7 to trigger BitLocker recovery?
  • mihi's avatar
    mihi
    Brass Contributor
    May 15, 2026

    No and no.