Event details
If the device with expired secure boot certificate after June 2026, whether if it will affect the device daily operation, like machine bootup & shutdown, software usage? Will the device turned off secure boot be affected?
For Secure Boot Off Devices- Certificate renewal is not applicable. There will be no impact, and the devices will continue to operate as expected.
Devices with an expired Secure Boot certificate after June 2026 will experience no impact on performance or boot functionality. However, Secure Boot protection will no longer be active. As a result, any future updates or features that rely on Secure Boot may fail or will not be applicable on these devices.
- Arden_White
Microsoft
To add to what kumarshai88hotmailco said
After the Secure Boot certificates expire, devices that haven’t received the newer 2023 certificates will continue to start and operate normally, and standard Windows updates will continue to install. However, these devices will no longer be able to receive new security protections for the early boot process, including updates to Windows Boot Manager, Secure Boot databases, revocation lists, or mitigations for newly discovered boot level vulnerabilities.
Over time, this limits the device’s protection against emerging threats and may affect scenarios that rely on Secure Boot trust, such as BitLocker hardening or third-party bootloaders. Most Windows devices will receive the updated certificates automatically, and many OEMs have provided firmware updates when needed. Keeping your device current with these updates helps ensures it can continue receiving the full set of security protections that Secure Boot is designed to provide.
