Event details

It's time for our second Ask Microsoft Anything (AMA) about updating Secure Boot certificates on your Windows devices before they expire in June of 2026. If you've already bookmarked Secure Boot play...
Heather_Poulsen
Updated Jan 29, 2026
AMA
Id_Jamie's avatar
Id_Jamie
Copper Contributor
Feb 05, 2026

what is being done with OEM's to make sure that images are updated out of box with everything being enabled correctly within OS without needing to trigger manual available updates key along with 0x5944. We dont want devices shipped from suppliers and warehouses if secureboot is bad out of box. 

  • mihi's avatar
    mihi
    Copper Contributor
    Feb 05, 2026

    Logo requirements for "Designed for Windows 11 25H2" requires the machine to ship with the new certificates, and any physical recovery media (if any) also having the new boot manager on them.