Event details

It's time for our second Ask Microsoft Anything (AMA) about updating Secure Boot certificates on your Windows devices before they expire in June of 2026. If you've already bookmarked Secure Boot play...
Heather_Poulsen
Updated Feb 12, 2026
AMA
Dom_Cote's avatar
Dom_Cote
Iron Contributor
Jan 28, 2026

GOOD news:

It looks like all Windows 11 virtual machines running on Hyper-V in our environment successfully updated their certificates already back in early December. This, independently of their hosts, who have NOT (yet).

Karl-WE​ Does this apply to Windows Server VMs on Hyper-V as well?

Karl-WE's avatar
Karl-WE
MVP
Jan 28, 2026

it applies to all 64bit Operating Systems Windows and Linux, Hardware and VMs as well as all Hypervisors.
Dom, you might want to use the script that I posted yesterday to get more insights (at scale).

  • Dom_Cote's avatar
    Dom_Cote
    Iron Contributor
    Jan 28, 2026

    I am using it right now. 😁 Which is how I learned that ALL W11 VMs are already updated and NONE of the physical devices in our (and our customers') fleet.

    It seems we'll have to wait for OEMs and MoBo manufacturers to ship firmware updates to unblock them. And/or Microsoft to unblock them via Windows Update. Correct?