Event details

It's time for our second Ask Microsoft Anything (AMA) about updating Secure Boot certificates on your Windows devices before they expire in June of 2026. If you've already bookmarked Secure Boot play...
Heather_Poulsen
Updated Jan 29, 2026
AMA
cbachmannde's avatar
cbachmannde
Occasional Reader
Feb 05, 2026

Does every certificate in the rollout need to be applied successfully? Specifically, the 'Microsoft Option ROM UEFI CA 2023' certificate fails to apply on some devices — is this expected/acceptable, or does it indicate a problem that needs resolving before we can safely enable enforcement?"

mihi's avatar
mihi
Copper Contributor
Feb 05, 2026

It does not affect installing the new boot loader or anything Windows related. It may affect Secure Boot working if you add new hardware like RAID controllers that have an Option ROM signed with the new certificate.