Event details

It's time for our third Ask Microsoft Anything (AMA) about updating Secure Boot certificates on your Windows devices before they expire in June of 2026. If you've already bookmarked Secure Boot playb...
Pearl-Angeles
Updated Mar 11, 2026
AMA
Bryant_Kintner's avatar
Bryant_Kintner
Copper Contributor
Mar 12, 2026

Can Secure Boot certificates be updated when Secure Boot is disabled? Microsoft’s AvailableUpdates process errors out unless Secure Boot is enabled. If a device won’t boot Windows with Secure Boot on, how can we bring it into compliance?

  • Pearl-Angeles's avatar
    Pearl-Angeles
    Icon for Community Manager rankCommunity Manager
    Mar 12, 2026

    Your question was answered during the live AMA at 42:14. Follow aka.ms/GetSecureBoot for the latest updates and new tools/guides.

  • Ashis_Chatterjee's avatar
    Ashis_Chatterjee
    Icon for Microsoft rankMicrosoft
    Mar 12, 2026

    If Secure Boot is disabled, the device is compliant. Secure Boot certificate update compliance is applicable only to devices that have Secure Boot enabled