Event details
It's time for our second Ask Microsoft Anything (AMA) about updating Secure Boot certificates on your Windows devices before they expire in June of 2026. If you've already bookmarked Secure Boot play...
Heather_Poulsen
Updated Jan 29, 2026
Jpanski
Feb 06, 2026Brass Contributor
Hi, Most of this information seems to pertain to clients. I have a question about servers. HPE released an article, https://support.hpe.com/hpesc/public/docDisplay?docId=emr_na-a00156355en_us&hprpt_id=ALERT_HPE_3088457 that says "To enable the Windows UEFI CA 2023 certificate, install the latest BIOS version on each platform. Reset "All Keys to Platform Defaults" is required to activate the Windows UEFI CA 2023 certificate after latest BIOS is installed."
Why is the last step necessary? What if it's not done? Why isn't it necessary on clients to do this? Just wondering because it is a very manual disruptive process that will take quite some time. Thank you in advance.