Event details

It's time for our second Ask Microsoft Anything (AMA) about updating Secure Boot certificates on your Windows devices before they expire in June of 2026. If you've already bookmarked Secure Boot play...
Heather_Poulsen
Updated Jan 29, 2026
AMA
lord_eddard_stark's avatar
lord_eddard_stark
Copper Contributor
Feb 05, 2026

For manually installing the Secure Boot certificate update, is updating the BIOS the only way to do it? If I’m remembering correctly, the Microsoft-provided steps mainly prepare the device to receive the update from Microsoft, but don’t actually provide a way to manually install it. Can you confirm?

Deploy certificates with registry keys

Deploy certificates via WinCS

Deploy certificates using Group Policy

  • Pearl-Angeles's avatar
    Pearl-Angeles
    Icon for Community Manager rankCommunity Manager
    Feb 06, 2026

    Thanks for your question! Panelists covered this topic at 54:10 during the live AMA.