Ask Microsoft Anything: Secure Boot - May 18, 2026

Event details

Join us in May for our fourth Ask Microsoft Anything (AMA) about updating Secure Boot certificates on your Windows devices before they start expiring in June of 2026. If you've already bookmarked Sec...

Heather_Poulsen

Updated May 18, 2026

AMA

Technical Takeoff

jad

Copper Contributor

May 18, 2026

How to achieve "UEFICA2023Status=Updated" for OS (re)deployment/re-image scenarios? I've tested on a device with latest firmware, all 2023 certs are reflected in active/default secure boot DBs but boot manager is still PCA2011 signed and registry reflects 0x0/NotStarted. Same with OS media updated per 5053484 (Updating Windows bootable media to use the PCA2023 signed boot manager).