Windows Secure Boot certificate expiration

Discussion in 'other software & services' started by blacknight, Jul 23, 2025 at 1:26 AM.

  1. blacknight

    blacknight Registered Member

    Joined:
    Sep 25, 2007
    Posts:
    3,388
    Location:
    Europe, UE citizen
  2. Rules

    Rules Registered Member

    Joined:
    Mar 3, 2009
    Posts:
    778
    Location:
    Earth
    Normally rolled-out via windows update


    What do I have to do?
    Anyone who wants or needs to ensure that the UEFI Secure Boot certificate chain is aligned with the 2023 certificates must ensure that the certificates are updated on the systems. Microsoft will (probably) roll out the updated Secure Boot certificates in the coming months as part of the monthly patchdays via Windows Update.
    How do I know if the new certificate is available?
    You should be able to find out whether Windows has integrated the new certificate by looking at the following registry key (according to the support page):

    HKEY_LOCAL_MACHINE\SYSTEM\\CurrentControlSet\Control\SecureBoot\Servicing

    If the 32-bit DWORD value WindowsUEFICA2023Capable is set to 0x40, Windows should be prepared. With the DWORD value 0x0, the system is not ready for the new UEFI certificate.

    Capture.PNG

    Microsoft's UEFI Secure Boot certificate expires in June 2026 | Born's Tech and Windows World
     
    Last edited: Jul 23, 2025 at 3:40 AM
  3. blacknight

    blacknight Registered Member

    Joined:
    Sep 25, 2007
    Posts:
    3,388
    Location:
    Europe, UE citizen
  4. Raza0007

    Raza0007 Registered Member

    Joined:
    Mar 30, 2009
    Posts:
    1,869
    Location:
    USA
  5. blacknight

    blacknight Registered Member

    Joined:
    Sep 25, 2007
    Posts:
    3,388
    Location:
    Europe, UE citizen
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.