logo

Microsoft's Original Windows Secure Boot Certificate Is Expiring

ID: b2855a7f-cb2a-5dc4-9421-bee8802d051f

STIX ID: report--b2855a7f-cb2a-5dc4-9421-bee8802d051f

Feed Name: Dark Reading

Threat Score
50/100

Date Published: 2026-04-16

Date Updated: 2026-04-22

Author: Jeffrey Schwartz

...
...

Microsoft warns that the original 2011 UEFI Secure Boot certificates used by many Windows PCs will start expiring on June 24; devices that do not receive the updated 2023 certificates may lose Secure Boot protections and the ability to accept future DB/DBX updates, increasing exposure to UEFI bootkits. Microsoft urges IT teams to inventory endpoints, apply the updated certificates, confirm OEM firmware prerequisites, and use the Windows Security app indicator and its playbook to ensure ongoing device boot integrity.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.