Microsoft Rolls Out New Secure Boot Certificates to Replace Expiring Ones

Microsoft is deploying new Secure Boot certificates to replace those nearing expiration. These updates automatically target eligible systems running Windows 11 24H2 and 25H2, with no user intervention required. The affected certificates, including Microsoft Windows Production PCA 2011 and Microsoft Corporation UEFI CA 2011, are set to expire in 2026 and 2029, respectively. The rollout has begun and aims to maintain the integrity of the secure boot process, preventing the execution of unsigned or malicious software. No impact on performance or compatibility has been mentioned.