Event details

It's time for our third Ask Microsoft Anything (AMA) about updating Secure Boot certificates on your Windows devices before they expire in June of 2026. If you've already bookmarked Secure Boot playb...
Pearl-Angeles
Updated Mar 11, 2026
AMA
Churros_Fragobar's avatar
Churros_Fragobar
Copper Contributor
Mar 09, 2026

Let's say I have a 2024 HP ProBook Laptop with 2026 latest BIOS update, AD DS joined, with Windows Update activated with basic GPO settings (drivers and quality included).

No telemetry , no diagnostics sent to MS, no Intune.

If I let things go without interfering, when does this laptop will get certificates update from Windows Update ?

Will the update sent from Windows Update will create the scheduled task and run it every 12h ?

 

Thanks

mihi's avatar
mihi
Brass Contributor
Mar 13, 2026

It will get the certificate with a monthly cumulative update, assuming the device type reaches the high confidence list. Probably it already has.

The scheduled task is already there for a long time (it has been also used to apply DBX updates, for example) and it will run every 12 hours, but just do nothing as long as there is nothing to do.