Event details

It's time for our second Ask Microsoft Anything (AMA) about updating Secure Boot certificates on your Windows devices before they expire in June of 2026. If you've already bookmarked Secure Boot play...
Heather_Poulsen
Updated Jan 29, 2026
AMA
knmcelhaney's avatar
knmcelhaney
Copper Contributor
Feb 05, 2026

If a device receives the new certificate in the active db and is later reimaged, would the device lose the new certificate? I'm unclear how reimaging affects the db/bootmgr since the drive has to be en-encrypted?

  • mihi's avatar
    mihi
    Copper Contributor
    Feb 05, 2026

    active db is stored in your firmware/NVRAM, so should not be touched by anything you can do to your drives.