Microsoft Halts Secure Boot Update Due to Issues

Microsoft has temporarily halted the rollout of Secure Boot certificate updates for some Windows 11 computers. This action addresses issues encountered with devices updating from an expired 2011 certificate to the latest 2023 version. Faulty firmware on specific devices prevented the successful application of the new certificate, leading Microsoft to pause the update to mitigate risks.

Secure Boot is a critical security feature that verifies and loads only authentic software before Windows starts. The inability to update certificates means some older devices, or those no longer supported by their original equipment manufacturer (OEM), may be permanently unable to install the latest Secure Boot protections. While this does not pose an immediate risk or system failure, it gradually reduces long-term security against future vulnerabilities.

Microsoft is collaborating with OEMs, such as HP which has already released a BIOS update, to provide necessary firmware patches. Users can check their Secure Boot status through the Windows Security app. Devices showing specific messages may require OEM firmware updates or may be out of OEM support entirely. Microsoft advises users to continue with regular Windows updates and follow standard security practices.