In June 2026, UEFI Secure Boot certificates for Windows will expire. In October 2026, the next UEFI certificate for Secure Boot will expire. Microsoft has been trying to replace this Secure Boot certificate in UEFI for quite some time. In a post on the Windows blog, Microsoft commented on February 10, 2026, on what will happen when certificates expire.
Expiring UEFI Secure Boot certificates
The Secure Boot certificates, which were first issued 15 years ago (for Windows 8 machines) and rolled out in the UEFI of devices, will expire in June 2026. Microsoft has published a table with a list of expiring certificates in the Techcommunity post Act now: Secure Boot certificates expire in June 2026.
But what happens, if an administrator didn't update the certificates, or Windows Update wasn't able to update the expired certificates? Read more about the details here [use the blog's build in translation option for your language]
