On June 24th, several older Microsoft certificates expired, affecting many Windows 10 and 11 users who now need to update their computers. Without properly updated certificates, Windows Secure Boot will stop working and can no longer guarantee secure startups. This issue can be resolved through a Windows Update, but some devices require a firmware update from the PC manufacturer first. The expiration of these certificates has significant implications for the security of affected devices.
Microsoft has temporarily suspended the issuance of new certificates for certain PCs, including some HP models. The company explains that the full set of Secure Boot certificates install automatically through Windows Update on most PCs. However, some devices require a firmware update from the manufacturer before the necessary Secure Boot updates can be installed. Many manufacturers are actively releasing these firmware updates through their standard update channels.
In some cases, Windows Security may indicate that Secure Boot certificate updates are temporarily paused or blocked. This can occur due to a known issue or hardware and firmware limitations. If a firmware update is required, users should check their manufacturer's Secure Boot support page for next steps. The risk of running into trouble due to outdated certificates is currently low but is likely to increase over time.
Until affected computer manufacturers have provided new firmware, it will not be possible to update the relevant Secure Boot certificates. If a device reaches the expiration date without the new certificates, it will continue to start and operate normally, and standard Windows updates will still be installed. However, the device won't be able to receive new security updates that address threats to the early boot process, leaving it progressively less protected over time.
Features that rely on Secure Boot, such as device encryption or certain startup software, might also stop working properly if they require updated security protection. Users affected by this problem have no choice but to wait for a solution from Microsoft and the affected manufacturers. The situation highlights the importance of keeping devices up to date with the latest security patches and firmware updates.
