Windows Secure Boot Certificates Matching Expiry Dates
Windows Secure Boot Certificates Matching Expiry Dates
I have read where Windows 11 Secure Boot certificates are expiring in 2026. It sounds like we'll lose out on a number of security features if they're not updated on our systems... but there's terribly little useful info how to do it.
Is this really only an issue for IT managers in charge of corporate managed computers?
Is this going to be handled for the "average" home user through normal, routine Windows updates?
microsoft certificates are refreshed via windows updates and firmware updates
skilled users may install any certificate they prefer
Ahh... so if I need or use certificates for a particular reason, I’d prefer to handle that.
My machine is old and has been deprecated by its maker, so no BIOS or firmware updates should be coming. I’m pretty sure about that.
But apart from that, it’s reasonable to think that a typical home user like me can just rely on Windows Update to maintain my system’s freshness.
EDIT: I found something in one of the links:
"If you’re using a Windows 10 or 11 device running Home, Pro or Education edition and receive updates automatically from Microsoft (which most people do), then yes—this applies to your setup.
The good news is that the new 2023 certificates will arrive on your device via standard Windows Update channels. For most users, no action is required."
So essentially, I just need to ensure Secure Boot is enabled and keep receiving updates."
Thanks....
However, separately, I really dislike Microsoft's tendency toward excessive verbosity in these notices. If they were to target the discriminator—essentially a standard home user who lets Microsoft manage their systems versus the tech-savvy individual who customizes everything—these issues would likely cause more questions. But then it wouldn't be an issue if I weren't somewhere in between those extremes, since most home users don't even notice these things.
Throughout my years with Windows, I've never needed to handle or install secure boot certificates myself. At least not the ones provided by Microsoft.