MC1309552 – M365 Change Digest

One-line summary

Secure Boot certificates start expiring in June 2026; Microsoft offers AMAs to help you prepare, with the next event on May 18, 2026.

Similar updates

More like this

MC1185931 Secure Boot playbook for certificates expiring in 2026

Secure Boot playbook for certificates expiring in 2026 Secure Boot certificates on many Windows devices will expire in June 2026; admins should monitor, prepare, and update certificates to ensure continued protection. Additional information: Bookmark https://aka.ms/GetSecureBoot for more information about this change, detailed guidance for.

MC1104112 (Updated) Act now: Secure Boot certificates expire in June 2026

(Updated) Act now: Secure Boot certificates expire in June 2026 Microsoft will roll out updated Secure Boot certificates for Windows systems; current certificates start expiring June 2026, requiring firmware and policy updates to maintain security. Visit the Secure Boot certificate rollout landing page for guidance for personal devices and.

MC1139443 Secure Boot certificate expiration: What Windows IT admins need to know now

Secure Boot certificate expiration: What Windows IT admins need to know now Microsoft is updating Secure Boot certificates before current ones expire in 2026; IT admins must ensure systems accept new certificates to maintain security and updates. Additional information: Read  Act now: Secure Bo... Bookmark the  Secure Boot certificate rollout.

MC1173103 Secure Boot certificate deployment guide and tools

Secure Boot certificate deployment guide and tools Update expiring Secure Boot certificates to 2023 CAs using new guides and tools; 2011 CAs start expiring June 2026, with 2023 CAs rolling out via Windows updates from October 2025. Use the newly published guide and tools to start updating your organization’s expiring Secure Boot certificates. As.

MC1160163 Frequently asked questions about the Secure Boot update process

Frequently asked questions about the Secure Boot update process Review FAQs and recommendations to prepare for Windows Secure Boot certificate expiration before June 2026. Additional information: Browse Frequently asked questions... Bookmark the landing page for Windows Secure Boot certificate expiration and CA updates. Catch up on.

MC1193371 How to use Microsoft Intune to update expiring Secure Boot certificates

How to use Microsoft Intune to update expiring Secure Boot certificates Admins can now use Intune to deploy, manage, and monitor Secure Boot certificate updates on Windows clients, with new settings available for streamlined management. ...n: As the 2011 Secure Boot certificates will start expiring in June 2026,See how these methods work.

Details

Body (from Message Center)

Secure Boot certificates start expiring in June of 2026. Whether you’re actively deploying or just starting to plan, an ongoing series of AMAs is here to provide you with clear, practical answers directly from Microsoft experts.

When will this happen:

The next Secure Boot AMA will take place on the Microsoft Tech Community at 8:00 AM PDT on May 18, 2026.

What you need to do to prepare:

Visit https://aka.ms/AMA/SecureBoot and sign in to the Tech Community to post your questions in advance or in real time during the event. You’ll also find options to add the event to your calendar.

Additional information:

For continued guidance and updates, bookmark the Secure Boot playbook and https://aka.ms/GetSecureBoot.

Raw JSON (for debugging)

Expand/collapse the full payload below.

Show/hide raw

{
  "snapshot_item": {
    "action_required_by": null,
    "ai_action_required_by": "2026-05-18T00:00:00Z",
    "ai_actions": [
      "Attend Secure Boot AMA on May 18, 2026",
      "Bookmark Secure Boot playbook for ongoing guidance"
    ],
    "ai_master_tags": [
      "Admin",
      "Security"
    ],
    "ai_model": "gpt-4.1",
    "ai_summary": "Secure Boot certificates start expiring in June 2026; Microsoft offers AMAs to help you prepare, with the next event on May 18, 2026.",
    "ai_topics": [
      "Windows"
    ],
    "category": "stayInformed",
    "details_map": {},
    "id": "MC1309552",
    "importance": 5,
    "is_major_change": true,
    "last_modified": "2026-05-13T17:05:12Z",
    "ms_products": [
      "Windows"
    ],
    "platforms": null,
    "roadmap_ids": [],
    "services": [
      "Windows"
    ],
    "severity": "normal",
    "tags": [
      "Admin impact"
    ],
    "title": "Tune in May 18 to ask Microsoft anything about Secure Boot"
  }
}