Make sure you've updated before the deadline.
Microsoft confirms systems without updated Secure Boot certificates will boot normally but lose some security protections.
In June 2025, Microsoft announced that, in June 2026, it would begin deprecating Secure Boot certificates of Windows systems from 2011, which were superseded by their 2023 counterparts.
Microsoft is rolling out refreshed Secure Boot certificates across the Windows ecosystem, aiming to replace the original trust anchors that have been in use since 2011. Secure Boot is enforced by UEFI ...