Event details
It's time for our second Ask Microsoft Anything (AMA) about updating Secure Boot certificates on your Windows devices before they expire in June of 2026. If you've already bookmarked Secure Boot play...
Heather_Poulsen
Updated Feb 12, 2026
lalanc01
Feb 04, 2026Iron Contributor
Hi, I would like to have some clarification to know if we enable this
What is the Controlled Feature Rollout for secureboot?
Does that mean that MS will be in charge of updating the certs like for high confidence devices?
So it's kinda like us deciding which devices we know can have the cert renewed by MS?
Or it's something else?
thks for clarifying.
HeyHey16K
Feb 05, 2026Steel Contributor
That's how we have interpreted it - by configuring those RKs on devices, you're giving MS the greenlight to deploy the certs automatically to them.