Microsoft reveals what will happen to Windows 11 PCs if they ignore the June 2026 Secure Boot deadline.
The
Microsoft reveals what happens to Windows 11 PCs if you ignore the Secure Boot deadline in June 2026
https://www.windowslatest.com/2026/05/26/microsoft-reveals-what-happens-to-windows-11-pcs-if-you-ignore-the-secure-boot-deadline-in-june-2026/
Secure Boot is a security feature used to ensure that only trusted software runs during device boot-up. Secure Boot certificates verify this software, and Microsoft has been updating the certificates, initially issued in 2011, to ensure continued verification. However, these older certificates will expire in June 2026.
Microsoft has issued a new certificate called the 2023 Secure Boot Certificate, which is being distributed through Windows Update. For normal use, the update will be completed by performing a Windows Update. According to Microsoft, the update may cause a new Secure Boot folder to appear in Windows 11 or multiple abnormal restarts to occur, but all of these are normal behaviors and do not cause any problems.
On the other hand, if you are using your device in a special way, such as disabling Secure Boot, you will need to change the settings. According to Microsoft, the system checks whether Secure Boot is enabled during updates to prevent unnecessary updates from bricking your device. Some motherboard firmware can update certificates even if Secure Boot is disabled, but generally, Secure Boot needs to be enabled.
While Windows will still boot and function normally even if you ignore Windows Update and fail to update your Secure Boot certificate, your security will be permanently compromised because Microsoft will stop distributing essential boot updates and malware blacklists.
Furthermore, Microsoft has stated that 'future OS upgrades will require a valid 2023 Secure Boot certificate,' so if your device does not have the certificate, you may not be able to receive the next upgrade.
The 2023 Secure Boot certificate will expire in 2038, giving it a lifespan of over 10 years. However, Microsoft points out that this deadline is not entirely accurate, as the industry is undergoing changes to prepare for the arrival of the 'post-quantum cryptography era,' when powerful quantum computers will crack existing cryptographic algorithms. They added that 'hardware manufactured in the 2030s will ship with completely new post-quantum cryptography certificates.'
The day when quantum computers can crack RSA and elliptic curve cryptography (ECC) is expected to be around 2030. What should we do before then? - GIGAZINE
Related Posts:
in Software, Posted by log1p_kr