Microsoft has clarified what will happen to Windows 11 PCs that do not receive the upcoming Secure Boot certificate updates before the June 2026 deadline.
The issue centers on Secure Boot certificates introduced in 2011, set to expire in June 2026. These verify that Windows boots using trusted software and protect against low-level malware such as bootkits.
According to Microsoft, PCs that ignore the update could face:
- Reduced protection against boot-level malware and unauthorized bootloaders
- Inability to receive future Secure Boot revocation updates
- Potential failures when installing future Windows feature updates
- Boot errors or recovery screens after future firmware or security changes
- Compatibility issues with newer Windows boot components
Many systems will continue to boot normally after June 2026, so users should not expect sudden unusability. However, unsupported or older devices without updated certificates are most vulnerable.
Microsoft recommends keeping Windows Update enabled, ensuring Secure Boot is on in UEFI/BIOS settings, and installing firmware updates from the PC manufacturer.
Via: windowslatest