Microsoft's Secure Boot: Are You Protected?

Microsoft is introducing a new Secure Boot status dashboard in Windows 11 and Windows 10 to help users manage expiring security certificates. The original certificates, crucial for protecting your PC's startup process, are scheduled to expire in June. This new feature will appear in the Windows Security app under Device security, displaying a status indicator.

A green badge signifies that your PC has received the necessary updates for the new certificates. A yellow badge suggests a recommendation for action, possibly a firmware update. However, a red badge indicates that your PC cannot receive the updated Secure Boot software certificates, a situation that could arise as early as June 2026 when current certificates expire.

Secure Boot prevents malware from running during startup. While Windows 11 PCs are generally expected to be compatible, many Windows 10 PCs, which lost official support in October, may not receive these new certificates. Exceptions include PCs enrolled in the Windows 10 Extended Security Updates program. Microsoft has warned that PCs not receiving the new certificates will enter a degraded security state, potentially exposing them to boot-level vulnerabilities.