MC1160163 – M365 Change Digest

One-line summary

Review FAQs and recommendations to prepare for Windows Secure Boot certificate expiration before June 2026.

Similar updates

More like this

MC1185931 Secure Boot playbook for certificates expiring in 2026

Secure Boot playbook for certificates expiring in 2026 Secure Boot certificates on many Windows devices will expire in June 2026; a... Additional information: Bookmark https://aka.ms/GetSecureBoot for more information about this change, detailed guidance for managing Secure Boot certificate update, and answers to frequently asked questions..

MC1139443 Secure Boot certificate expiration: What Windows IT admins need to know now

Secure Boot certificate expiration: What Windows IT admins need to know now Microsoft is updating Secure Boot certificates before current ones expire in 2026; IT admins must ensure systems accept new certificates to maintain security and updates. What you need to do to prepare: Check with your OEM for the latest available firmware updates..

MC1104112 (Updated) Act now: Secure Boot certificates expire in June 2026

(Updated) Act now: Secure Boot certificates expire in June 2026 Microsoft will roll out updated Secure Boot certificates for Windows systems; current certificates start expiring June 2026, requiring firmware and policy updates to maintain security. Updated July 8, 2025: survey link chan... Visit the Secure Boot certificate rollout landing page.

MC1173103 Secure Boot certificate deployment guide and tools

Secure Boot certificate deployment guide and tools Update expiring Secure Boot certificates to 2023 CAs using new guides and tools; 2011 CAs start expiring June 2026, with 2023 CAs rolling out via Windows updates from October 2025. Use the newly published guide and tools to start updating your organization’s expiring Secure Boot certificates. As.

MC1192217 Secure Boot AMA: Ask Microsoft Anything on December 10

Secure Boot AMA: Ask Microsoft Anything on December 10 Join a live AMA on December 10, 2025, for guidance on updating Secure Boot certificates on Windows devices before their June 2026 expiration; get expert advice and post questions in advance. Join us December 10, 2025, at 8:00 AM PST for a live Ask Microsoft Anything (AMA) session focused on.

MC1193371 How to use Microsoft Intune to update expiring Secure Boot certificates

How to use Microsoft Intune to update expiring Secure Boot certificates Intune now supports deploying and managing Secure Boot certificate updates for Windows clients, offering an alternative to registry and Group Policy methods. New settings are available but disabled by default. You can now deploy, manage, and monitor Secure Boot certificate.

Details

Body (from Message Center)

Do you have questions about Windows Secure Boot certificate expiration? It’s best to update Secure Boot certificates well before the June 2026 expiration date. Check out an initial set of frequently asked questions and answers that will be updated with time. Explore different scenarios and recommendations that will help you plan and prepare.

When will this happen:

The questions and answers are already available to you. More questions and answers might be added with time.

How this will affect your organization:

This set of questions is available to help your organization plan and prepare for Secure Boot certification expiration.

What you need to do to prepare:

Read additional information.

Additional information:

Browse Frequently asked questions about the Secure Boot update process.
Bookmark the landing page for Windows Secure Boot certificate expiration and CA updates.
Catch up on recommendations for Windows devices with IT-managed updates.

Raw JSON (for debugging)

Expand/collapse the full payload below.

Show/hide raw

{
  "snapshot_item": {
    "action_required_by": null,
    "ai_action_required_by": "2026-06-30T00:00:00Z",
    "ai_actions": [
      "Review Secure Boot certificate FAQs",
      "Bookmark expiration info page",
      "Plan certificate updates for Windows devices"
    ],
    "ai_master_tags": [
      "Security"
    ],
    "ai_model": "gpt-4.1",
    "ai_summary": "Review FAQs and recommendations to prepare for Windows Secure Boot certificate expiration before June 2026.",
    "ai_topics": [
      "Windows"
    ],
    "category": "stayInformed",
    "details_map": {},
    "id": "MC1160163",
    "importance": 1,
    "is_major_change": false,
    "last_modified": "2025-09-26T17:04:29Z",
    "ms_products": [
      "Windows"
    ],
    "platforms": null,
    "roadmap_ids": [],
    "services": [
      "Windows"
    ],
    "severity": "normal",
    "tags": [
      "Admin impact"
    ],
    "title": "Frequently asked questions about the Secure Boot update process"
  }
}