Event details
It's time for our second Ask Microsoft Anything (AMA) about updating Secure Boot certificates on your Windows devices before they expire in June of 2026. If you've already bookmarked Secure Boot play...
Heather_Poulsen
Updated Jan 29, 2026
KenSha
Feb 05, 2026Copper Contributor
In the Registry Entry HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecureBoot
What does an "AvailableUpdates" value of 400 (0x00000400) indicate?
mihi
Feb 05, 2026Copper Contributor
It will push updates to the SBAT variable. This variable is used by Non-Windows bootloaders (mostly Linux distributions) by blocking boot of systems that contain boot-related software with known vulnerabilities.
When you never use Linux (including Linux-based recovery tools), you can safely push it. If you use them, check to have the latest version of those media.
Also, when you have a dual-boot scenario, Linux will take care of keeping your SBAT up to date, so you do not need to push it from Windows.