Event details

It's time for our second Ask Microsoft Anything (AMA) about updating Secure Boot certificates on your Windows devices before they expire in June of 2026. If you've already bookmarked Secure Boot play...
Heather_Poulsen
Updated Jan 29, 2026
AMA
DonDottaNonHotta's avatar
DonDottaNonHotta
Occasional Reader
Feb 05, 2026

Are there plans to prevent SB enabled devices without updated certs from upgrading to future OS versions where the Boot Manager is signed with the 2023 certs (26H2?)

mihi's avatar
mihi
Copper Contributor
Feb 05, 2026

25H2 shipped with both boot managers, and insider builds do as well (\Windows\Boot\EFI vs \Windows\Boot\EFI_EX). I would assume that 26H2 will still ship with both boot managers, albeit the 2011 signed one not being updated any longer.

Nobody knows about the more distant future, but my guess is that even 27H2 will ship with both boot managers.