Event details
It's time for our second Ask Microsoft Anything (AMA) about updating Secure Boot certificates on your Windows devices before they expire in June of 2026. If you've already bookmarked Secure Boot play...
Heather_Poulsen
Updated Feb 12, 2026
IT_SystemEngineer
Jan 22, 2026Brass Contributor
Please correct the error/misunderstanding regarding the GPO "Automatic Certificate Deployment via Updates"
Automatic Certificate Deployment via Updates
Enabled = HighConfidenceOptOut = 1
Disabled = HighConfidenceOptOut = 0
https://support.microsoft.com/en-us/topic/group-policy-objects-gpo-method-of-secure-boot-for-windows-devices-with-it-managed-updates-65f716aa-2109-4c78-8b1f-036198dd5ce7
>> correct description!
#######
Secure Boot playbook for certificates expiring in 2026
>> incorrect description at the End! (Should be "Enabled")
- Arden_WhiteFeb 06, 2026
Microsoft
Good eye! I'll see about getting that changed.
I believe theGroup Policy Objects (GPO) method of Secure Boot for Windows devices with IT-managed updates page has the correct description.