Event details

It's time for our second Ask Microsoft Anything (AMA) about updating Secure Boot certificates on your Windows devices before they expire in June of 2026. If you've already bookmarked Secure Boot play...
Heather_Poulsen
Updated Jan 29, 2026
AMA
craigthorn78's avatar
craigthorn78
Occasional Reader
Feb 05, 2026

Is there a plan for Microsoft or OEM to only ship hardware with new 2023 certs ? Assuming that when option ROM expire it will not be possible to certify new devices after this date? I.e. Dell release new laptop model in Jan 2027 will only ship with 2023 certs?  Does this mean not compatible with old 2011 bootloaders (Operating Systems)

  • Pearl-Angeles's avatar
    Pearl-Angeles
    Icon for Community Manager rankCommunity Manager
    Feb 06, 2026

    Thanks for your question! The panelists covered this topic at 40:04 during the live AMA.

  • mihi's avatar
    mihi
    Copper Contributor
    Feb 05, 2026

    "Designed for Win11 25H2" implies the new certs are included. It is up to the vendors to decide whether they keep the old certs in, remove them, or provide a UEFI setup option for the end user to decide. Nobody yet knows what the requirements for 27H2 will be :)