Event details

It's time for our second Ask Microsoft Anything (AMA) about updating Secure Boot certificates on your Windows devices before they expire in June of 2026. If you've already bookmarked Secure Boot play...
Heather_Poulsen
Updated Jan 29, 2026
AMA
sarahstarIT's avatar
sarahstarIT
Occasional Reader
Feb 05, 2026

so if you are saying that you are looking after the consumer updates so they dont need to worry about the cert? why as organization with 6k machines I need to do anything ? thanks  

So the cert is already on OS this is a plan to make sure that it will be deployed properly to the bios? 

  • mihi's avatar
    mihi
    Copper Contributor
    Feb 05, 2026

    Organizations tend to block telemetry, that's why Microsoft cannot look after them :)

    All of this is updating your UEFI firmware (which nowadays usually does not contain a BIOS any more) to have the latest certs, and to switch your installed system to actually use them.