GoKawiilAllison Robbert/For The Washington Post via Getty Images
Follow ZDNET: Add us as a preferred source on Google.
ZDNET's key takeaways
Secure Boot protects modern Windows and Linux PCs.
Microsoft Secure Boot certificates from 2011 expire in June and October 2026.
Most PC owners are fine if they install the latest updates.
Last year's end-of-support deadline for Windows 10 was a big test for consumers and IT pros alike. Congratulations -- everyone passed! Before you start celebrating, though, pay attention to another crucial expiration date that's arriving this week. Four crucial Microsoft security certificates are expiring, with the first one expiring today, June 24, 2026.
Microsoft has been refreshingly transparent about what it's doing to replace these old certificates, with guidance for both consumers and enterprise customers. It also added an easy way for anyone to check the status of the certificates, using the built-in Windows Security utility. (More details on that later in this post.) Oh, and now might be a really good time to make sure you have saved a copy of your BitLocker recovery key, just in case.
This deadline is a little more complicated than the Windows 10 end-of-support date. To understand why, we need to talk about a core security feature found in every Windows PC designed and built since 2011: Secure Boot. This feature, enabled by default on new PCs sold with Windows 10 and Windows 11, acts as a gatekeeper, allowing only trusted software to run at startup. If someone tries to tamper with the operating system or boot from an alternate device, Secure Boot blocks that attempt.
Also: How to upgrade your 'incompatible' Windows 10 PC to Windows 11 - for free
... continue reading