Event details

It's time for our second Ask Microsoft Anything (AMA) about updating Secure Boot certificates on your Windows devices before they expire in June of 2026. If you've already bookmarked Secure Boot play...
Heather_Poulsen
Updated Feb 12, 2026
AMA
mikeh36's avatar
mikeh36
Copper Contributor
Feb 05, 2026

I've got questions about ConfigMgr pxe booting. If we update our boot.wim to have the 2023 cert will systems that are not updated still be able to pxe boot? In other words, which order should we be going at this? Update systems first or update the pxe boot.wim?

mihi's avatar
mihi
Copper Contributor
Feb 05, 2026

Update devices first, then update boot media. PXE is just a fancy form of boot media that lives in thin air.

 

Note that for PXE, it is not boot.wim that needs to have the new certificates, but Bootmgfw.efi or Wdsmgfw.efi "needs" to be updated.