Event details

It's time for our fourth Ask Microsoft Anything (AMA) about updating Secure Boot certificates on your Windows devices before they expire in June of 2026. If you've already bookmarked Secure Boot play...
Pearl-Angeles
Updated Apr 15, 2026
AMA
jhammonds978's avatar
jhammonds978
Occasional Reader
May 15, 2026

Hello,

I have question about this scenario:

  • UEFI CA 2011 and UEFI CA 2023 certs are both signed by boot manager and in Active DB
  • UEFI CA 2011 certs are in Default DB
  • UEFI CA 2023 certs are not in Default DB

When the UEFI CA 2011 certs expire June 2026, will PC fail to boot?

Prabhakar_MSFT's avatar
Prabhakar_MSFT
Icon for Microsoft rankMicrosoft
May 15, 2026

Hello jhammonds978​ ,   Systems continue to boot normally even after certificate expiry.   Refer to below section published at When Secure Boot certificates expire on Windows devices - Microsoft Support  which explains what happens when Certificates expire.

What continues to work

  • The device continues to start normally.
  • Windows updates continue to install, except for boot‑related security components that require the updated certificates.
  • Everyday app use, networking, browsing, and most OS features remain unchanged.