With the June 2026 Patch Tuesday update (KB5094126), Microsoft pushed the Secure Boot 2023 certificate update to a significantly wider set of Windows 11 and Windows 10 devices. For the better part of two years, this rollout has been cautious and phased, held back by firmware compatibility checks. With the June update, the vast majority of supported consumer PCs that Microsoft has diagnostic data for are now in the high confidence category, which means the certificates are either already applied or on their way without any action needed from you.
Secure Boot has been one of the more misunderstood topics in Windows lately. Since a lot of coverage has been aimed at IT professionals, regular home users are left wondering if they need to do anything at all. The short answer for most people is no. The longer answer depends on a few things, and we cover all of them here.
What is Secure Boot and why is it important for your PC?
Secure Boot is a security feature built into the firmware of your PC, specifically the UEFI (the modern replacement for BIOS). When you power on your computer, Secure Boot checks the cryptographic signature of the software trying to load before Windows even starts. If something unauthorized tries to run at that early stage, like a rootkit or a bootkit that hides from your antivirus, Secure Boot blocks it. It has been required for Windows 11 since its launch and is on by default on all modern PCs.
The certificates that back this system were originally issued in 2011. Those 2011-era certificates are now expiring in stages, starting June 24, 2026, with additional expirations stretching to October 2026. Microsoft has been rolling out replacement certificates, called Secure Boot 2023, so that PCs can continue receiving boot-level security updates after the old certificates stop being useful. We covered what happens to Windows 11 PCs if you ignore this deadline in detail earlier.
If you’re a regular Windows 11 or Windows 10 user, here’s what to do
Check your status in Windows Security
For most home users, nothing needs to be done manually. The Secure Boot 2023 certificates are being delivered through Windows Update, and if your device qualifies and Windows Update is not paused, the update happens in the background. However, you should still verify your status. Since the April 2026 update, Windows 11 shows your Secure Boot certificate status directly inside the Windows Security app. Open Windows Security > Device Security > Secure Boot section. A green checkmark means your PC is fully updated, and no further action is needed.
Via windowslatest
