According to the source review from Digital Trends Computing, many Windows PCs may not automatically receive updated Secure Boot certificates before the June 2026 deadline. The review outlines straightforward steps for users to verify their system’s status and details the required updates or fixes to maintain secure boot functionality.
- Check Secure Boot certificate status using PowerShell commands.
- Update firmware via OEM support if automatic Windows Updates don’t apply the fix.
- Windows 10 users without ESU subscription face limited update options.
Product angle
The source review reports on the impending expiration of Secure Boot certificates originally installed in Windows PCs starting in 2011. It highlights that while Microsoft is pushing updated certificates automatically through Windows Update, this process will not reach all devices, especially older machines, potentially leading to boot failures or security risks after June 2026.
The review provides a practical approach on how to verify whether a PC has received the updated certificates using PowerShell. It also describes Microsoft’s documented workarounds for cases where firmware updates are unavailable, emphasizing that firmware-level support ultimately depends on PC manufacturers providing necessary updates tailored to specific models.
Best for / avoid if
This advice and update method is best suited for Windows 11 users and those with supported hardware likely to receive patches through Windows Update or OEM firmware updates. Users proactive about maintaining their system’s security integrity will find this information crucial for preparing ahead of the certificate expiry.
Users running unsupported versions of Windows 10 without an Extended Security Update (ESU) subscription should be aware they will not receive these critical certificate updates automatically. For such users, upgrading to Windows 11 or enrolling in ESU before October 14, 2026, is strongly recommended. PCs too old to receive OEM firmware updates may require alternative maintenance strategies or hardware replacement.
Pricing and alternatives to check
No direct pricing is associated with the certificate updates themselves as they are delivered through free Windows Updates or firmware updates from manufacturers. However, users on unsupported Windows 10 versions must consider the cost of ESU subscriptions or a full upgrade to Windows 11 to maintain Secure Boot compatibility post-2026.
The main alternatives in this context are to verify eligibility for automatic Microsoft updates, seek OEM firmware updates available on manufacturer support sites, or execute Microsoft’s command-line workarounds for certain systems. Choosing to upgrade hardware or operating systems may also serve as a long-term solution to ensure continued support. Monitoring OEM and Microsoft communication channels is advised to stay informed on update availability.