FAQ: What you need to know about expiring Windows Secure Boot certificates
Microsoft is preparing to make a significant change to the Secure Boot system in Windows that will impact operations for both clients and servers. In a nutshell: The Secure Boot certificates that Microsoft issued 15 years ago are being replaced by newer ones, with the older certificates set to expire beginning in June. To continue to receive the most up-to-date security protections for the Windows boot-up process, individual users and IT administrators alike need to make sure their Windows devices have the new Secure Boot certificates installed. Have questions? Of course you do. Here are answers to eight key questions about the Secure Boot certificate updates. What is Secure Boot? Secure Boot is a security feature that verifies that all firmware-based software is signed by a trusted certificate when Windows starts up. If something doesn’t match, it gets blocked. This all happens immediately on boot, before Windows or anything else loads. Secure Boot is a part of the UEFI firmware stand