Microsoft will automatically replace the security certificates at the boot level on Windows devices before their expiration at the end of this year. According to a Microsoft blog post, new Secure Boot certificates will be distributed as part of regular updates to the Windows 11 operating system.
The Secure Boot feature was introduced in 2011 to protect systems from unauthorized changes during the boot process, later becoming one of the hardware requirements for Windows 11. After 15 years, the expiration of Secure Boot certificates will occur from June to October 2026. A new batch of certificates was released in 2023 and is already being shipped with many new Windows-based devices sold from 2024, but older hardware will require an update.
"As cryptographic security evolves, certificates and keys need to be periodically updated to maintain robust protection. Removing old certificates and implementing new ones is standard industry practice that helps prevent outdated credentials from becoming a vulnerability and ensures that platforms meet modern security requirements," said reported Microsoft representative Nuno Costa in the companyâs blog.
Costa mentions that while PCs "will continue to function normally" with an expired certificate, their security level will "deteriorate," which may limit future boot-level updates and cause compatibility issues with new hardware or software. New Secure Boot certificates began to be distributed with the Windows 11 KB5074109 update last month.
New certificates will be installed automatically and will not require additional action from the overwhelming majority of Windows 11 users. Microsoft states that some specialized systems, such as servers or IoT devices, may go through different update processes and that a separate firmware update from third-party manufacturers may be required for "some devices."
Source:
Source: 3dnews.ru
