Event details

It's time for our second Ask Microsoft Anything (AMA) about updating Secure Boot certificates on your Windows devices before they expire in June of 2026. If you've already bookmarked Secure Boot play...
Heather_Poulsen
Updated Feb 19, 2026
AMA
jeddunn's avatar
jeddunn
Copper Contributor
Feb 25, 2026

I have noticed something on thousands of my devices that the WindowsUEFICA2023Capable value is set to 2  however, there is no mention of the UEFICA2023Status value. The device shows that it's booting on the 2023 cert. What does this mean?

  • lr1's avatar
    lr1
    Copper Contributor
    Feb 25, 2026

    Make sure to install the latest Windows LCU before updating the certs. For my understanding the UEFICA2023Status value changes only to the "updated" state, if your hardware type (BuckedID) has been approved as "problem-free" by Microsoft (and that definition comes with the LCU).