Event details

It's time for our second Ask Microsoft Anything (AMA) about updating Secure Boot certificates on your Windows devices before they expire in June of 2026. If you've already bookmarked Secure Boot play...
Heather_Poulsen
Updated Jan 29, 2026
AMA
saranrajappa's avatar
saranrajappa
Copper Contributor
Feb 05, 2026

1. When we set the CSP as

(a) HighConfidenceOptOut = Disable

(b) MicrosoftUpdateManagedOptin = Enable

(c) AvailableUpdates = Enable, When the

certificate deployment starts? provided device has latest firmware and patch (meeting requirement for secure boot)?