Microsoft is updating key Windows security component to keep your PC safe

Microsoft is now rolling out updated Secure Boot certificates, as the original ones from 2011 are about to expire later this year.

Secure Boot is a key Windows security component in modern PCs that ensures only trusted operating systems can run when you press the power button. Announced almost 15 years ago, Secure Boot became mandatory in 2021, when Microsoft released Windows 11. The original Secure Boot certificates are set to expire later this year, and Microsoft is now rolling out new certificates to keep you and your computer safe.

"As cryptographic security evolves, certificates and keys must be periodically refreshed to maintain
strong protection. Retiring old certificates and introducing new ones is a standard industry practice
that helps prevent aging credentials from becoming a weak point and keeps platforms aligned with
modern security expectations," says Microsoft in the announcement post, as it ramps up the certificate update rollout as part of the regular Patch Tuesday updates.

If your PC is not getting updates, say you turned off Windows Update or you have a Windows 10 PC outside the Extended Security Updates program, it will not pull a Y2K bug on you and stop working overnight. Microsoft says that expired Security Certificates won't prevent your device from working, but going forward, you risk encountering malware that uses unpatched vulnerabilities or certain software that relies on Secure Boot might stop working. That also includes future Windows releases, firmware updates, hardware compatibility, and more.

If you wonder if there is something you have to do to get new certificates, don't worry, no user action is required. Microsoft will do the job for you. Just make sure you install the latest Patch Tuesday updates. Microsoft adds that "a fraction of devices" might require a separate firmware update to install new certificates. Additionally, Microsoft plans to update the Windows Security App so that it can show you the current status of Secure Boot certificates.

You can read more about the announcement in a blog post on the official website. If you are not familiar with whether your PC has Secure Boot turned on, check out this guide to learn how to find out.