MC1192217 – M365 Change Digest

One-line summary

Microsoft hosts a live AMA on Dec 10, 2025, to guide IT admins on updating Secure Boot certificates before their June 2026 expiry, covering deployment planning and best practices.

Similar updates

More like this

MC1139443 Secure Boot certificate expiration: What Windows IT admins need to know now

Secure Boot certificate expiration: What Windows IT admins need to know now Microsoft is updating Secure Boot certificates before current ones expire in 2026; IT admins must ensure systems accept new certificates to maintain security and updates. Secure Boot protects Windows systems by validating firmware and boot components using trusted.

MC1185931 Secure Boot playbook for certificates expiring in 2026

Secure Boot playbook for certificates expiring in 2026 Secure Boot certificates on many Windows devices will expire in June 2026; admins should monitor, prepare, and update certificates to ensure continued protection. Secure Boot helps ensure that only trusted software runs during the boot seq... Additional information: Bookmark .

MC1104112 (Updated) Act now: Secure Boot certificates expire in June 2026

(Updated) Act now: Secure Boot certificates expire in June 2026 Microsoft will roll out updated Secure Boot certificates for Windows systems; current certificates start expiring June 2026, requiring firmware and policy updates to maintain security. Updated July 8, 2025: survey link changed In the coming months, Microsoft will be rolling out.

MC1160163 Frequently asked questions about the Secure Boot update process

Frequently asked questions about the Secure Boot update process Review FAQs and recommendations to prepare for Windows Secure Boot certificate expiration before June 2026. Do you have questions about Windows Secure Boot certificate expiration. It’s best to update Secure Boot certificates well before the June 2026 expiration date. Check out an.

MC1173103 Secure Boot certificate deployment guide and tools

Secure Boot certificate deployment guide and tools Update expiring Secure Boot certificates to 2023 CAs using new guides and tools; 2011 CAs start expiring June 2026, with 2023 CAs rolling out via Windows updates from October 2025. Use the newly published guide and tools to start updating your organization’s expiring Secure Boot certificates. As.

MC1193371 How to use Microsoft Intune to update expiring Secure Boot certificates

How to use Microsoft Intune to update expiring Secure Boot certificates Admins can now use Intune to deploy, manage, and monitor Secure Boot certificate updates on Windows clients, with new settings available for streamlined management. When will this happen: The following settings are now available in the Intune settings catalog: Configure.

Details

Body (from Message Center)

Join us December 10, 2025, at 8:00 AM PST for a live Ask Microsoft Anything (AMA) session focused on updating Secure Boot certificates on your Windows devices before they expire in June 2026. This event gives IT admins the chance to ask questions and get expert guidance on Secure Boot configuration, update scenarios, inventorying and preparing your environment, and formulating the right deployment plan for your organization. Members of the Windows team will be available to answer your questions, share tips, and provide insights to help you prepare devices for Secure Boot certificate deployment.

Visit the AMA: Secure Boot event page, log in to Tech Community, and post your questions in advance or during the live broadcast in the comments section. Save the date and start posting your questions early.

Raw JSON (for debugging)

Expand/collapse the full payload below.

Show/hide raw

{
  "snapshot_item": {
    "action_required_by": null,
    "ai_action_required_by": null,
    "ai_actions": [
      "Attend AMA on Secure Boot certificates",
      "Post questions in Tech Community",
      "Plan for Secure Boot certificate updates"
    ],
    "ai_master_tags": [
      "Admin",
      "Security"
    ],
    "ai_model": "gpt-4.1",
    "ai_summary": "Microsoft hosts a live AMA on Dec 10, 2025, to guide IT admins on updating Secure Boot certificates before their June 2026 expiry, covering deployment planning and best practices.",
    "ai_topics": [
      "Windows"
    ],
    "category": "stayInformed",
    "details_map": {},
    "id": "MC1192217",
    "importance": 0,
    "is_major_change": false,
    "last_modified": "2025-12-04T22:00:18Z",
    "ms_products": [
      "Windows"
    ],
    "platforms": null,
    "roadmap_ids": [],
    "services": [
      "Windows"
    ],
    "severity": "normal",
    "tags": [
      "Admin impact"
    ],
    "title": "Secure Boot AMA: Ask Microsoft Anything on December 10"
  }
}