Microsoft updates Windows Secure Boot certificates to address malware risks by April 2026
Updated
Updated · Forbes · Apr 22
Microsoft updates Windows Secure Boot certificates to address malware risks by April 2026
12 articles · Updated · Forbes · Apr 22
The update, included in April’s security patch, will install new Secure Boot certificates on nearly all Windows PCs by the end of April 2026.
Users can now check their Secure Boot certificate status in Windows Security, with new icon badges indicating if action is needed before certificates expire in several weeks.
Previously, certificate status was unclear to regular users, but Microsoft’s enhanced guidance aims to prevent exposure to boot-level malware and unauthorized modifications as certificates are replaced.
Is Microsoft's latest security push secretly designed to phase out older Windows PCs and servers?
With this update, has Microsoft truly defeated boot-level malware, or just opened the door for a new attack?
Your PC's security icon turns red after an update. Are you prepared for the immediate steps required?
A digital key to millions of PCs is expiring. What happens if the massive replacement effort goes wrong?
Will you be forced to pay Microsoft just to keep your Windows 10 PC secure from basic threats?
Could Microsoft's critical security update accidentally lock you out of your own computer forever?