Microsoft Auto-Replacing Aging Secure Boot Certificates on Older PCs
Old Windows machines getting automatic certificate updates before critical security creds expire later this year.
Microsoft is pushing out automatic Secure Boot certificate replacements to older Windows PCs. The reason? Those original certificates are about to hit their expiration date.
Secure Boot first landed in 2011 as a security feature designed to prevent malicious software from loading during system startup. Now, over a decade later, the certificates that make it work are aging out.
Here's the catch: if your machine doesn't receive the updated certificates, you might get locked out of future security updates entirely. Not exactly ideal for system protection.
The rollout is happening automatically through Windows Update, so most users won't need to lift a finger. But owners of legacy hardware should pay attention—missing this update could leave their systems vulnerable and unsupported going forward.