By Abhijith M B
Publication Date: 2026-05-25 19:05:00
The clock is ticking on one of the most fundamental security architectures inside your PC. In June 2026, the original Secure Boot certificates that have governed Windows hardware since 2011 will officially expire. To prevent millions of PCs from suddenly becoming vulnerable or failing to boot altogether, Microsoft is in the midst of a monumental, multi-year rollout of the new 2023 Secure Boot certificates.
Because this transition directly manipulates the UEFI firmware on your motherboard, it is a highly delicate process. To clear up the confusion, Microsoft recently hosted a detailed “Ask Microsoft Anything” (AMA) session in March 2026 featuring Principal Security Engineer Arden White, Principal Software Architect Scott Shell, and Group Engineering Manager Richard Powell.
I watched the full AMA, along with additional research to understand the full context, as it contains critical insights into how the update works, what happens if you ignore it, and…
