Windows 11 is refreshing Secure Boot keys in 2026. Here's why TPM-WMI Event ID 1801 appears, and how to verify the new certificate.

Microsoft has recently begun replacing expiring Secure Boot certificates on eligible Windows 11 systems running 24H2 and 25H2 ...

This article describes how to enable Secure Boot to install Windows 11. How Do I Enable Secure Boot? The easiest way to enable Secure Boot is to do so through UEFI. It's typically listed as one of the ...

Secure Boot has relied on the same security certificates to verify bootloaders since 2011, during the development cycle for Windows 8. But those original certificates are set to expire in June and ...

Get ye to Windows Update, because there's a good chance you've got new Secure Boot certificates to install. Microsoft just ...

In June 2025, Microsoft announced that, in June 2026, it would begin deprecating Secure Boot certificates of Windows systems ...

Microsoft adds a Secure Boot status report to Intune, helping IT admins track certificate updates and reduce security risks.

Microsoft is reminding users that the Secure Boot ecosystem will soon require a mandatory check-up. The Redmond-backed security protocol, part of the UEFI specification and primarily ...

Microsoft has begun rolling out updated Secure Boot certificates through monthly Windows updates to replace the original 2011 certificates that will expire in late June 2026.

Microsoft releases KB5077178, KB5077180, and KB5077374 with WinRE upgrades, Secure Boot updates, and Dynamic Setup improvements.