Microsoft's Windows Secure Boot certificates just expired – here's what you need to do

[DragonSlayer101]

The big picture: The original Secure Boot certificates Microsoft issued in 2011 for Windows devices began expiring last week, and new BIOS firmware is being rolled out by PC OEMs to keep Windows computers protected against boot-level threats. To help users navigate the transition, Asus, Dell, HP, Lenovo, and other PC makers have published official guides for BIOS and firmware updates.

Asus has confirmed that all consumer PCs will receive the update automatically through Windows Update. Users can also check manually via PowerShell to determine whether the certificates have already been installed. If not, they can follow the guide and run the Secure-Boot-Update scheduled task to install the latest certificates.

Lenovo has provided direct BIOS download links for all supported product lines, including ThinkPad, ThinkCentre, IdeaPad, Legion, Yoga, and others. The company also noted that some products are no longer supported and will not receive BIOS updates containing the new Secure Boot certificates.

Dell has revealed that devices with an end-of-service life before January 1, 2026, will not receive the new certificates. The company is only releasing updates for newer Alienware, Inspiron, XPS, Latitude, OptiPlex, Precision, Vostro, and Wyse devices.

HP's consumer PCs will receive the new certificates via Windows Update, but enterprise devices will require the SBKPFV3 substring in the SMBIOS Type 1 field as the minimum BIOS version string to receive the update. Like Dell, HP is also restricting the rollout to newer models, with PCs released in 2018 and earlier unable to update to the new BIOS.

MSI devices powered by Intel 7th- to 11th-generation Core processors or AMD Ryzen 3000H to 5000U processors will be updated through Windows Update, while newer systems featuring Intel 12th-generation or AMD Ryzen 5000H and later will require a BIOS flash. The company has published direct download links for updated BIOS packages on its official website for all compatible devices.

Acer is also seeding the updated BIOS for all compatible Aspire, Nitro, Predator, Swift, Extensa, TravelMate, and Spin devices through Windows Update. Many devices received the update between June 12 and June 26, while others are expected to be updated in the near future.

Microsoft's guide on Secure Boot certificates for Surface devices confirms that all supported Surface Pro, Surface Laptop, Surface Book, and Surface Studio models will receive the 2023 certificates through Windows Update. Devices that fall outside the support window will not receive the update as part of the company's standard software support policy.

Microsoft previously confirmed that an expired Windows Secure Boot certificate will not affect any functionality, meaning PCs that have not yet been updated to the latest certificate will continue to operate normally and receive all security updates. However, they may not support newer security protections for the early boot process, potentially leaving them more vulnerable to bootkits, firmware rootkits, and boot-sector viruses.

Permalink to story:

Microsoft's Windows Secure Boot certificates just expired – here's what you need to do

 

[Mercury Joe]

If you can not convince someone to upgrade then force them by refusing to release certificates via updates.

Windows should be able to update the certificates in the bios with an update and not rely on the manufacturer to do it for them.

Nothing like scaring people into creating e-waste over something that can realistically be ignored by most people.

 

[MasterAce]

”Older models are not supported”, how convenient…

 

[BadThad]

Another step toward the obsolescence of older hardware. Your PC may run, for awhile, but then they'll dream-up a new reason (I.e. missing certificates) that'll limit you. Should put the final nail in the coffin for that perfectly fine but pesky old hardware. They want their $$$$ and they want it ASAP.

 

[p51d007]

"It's for YOUR safety and security".

No, it's for them to get people "scared" and they'll run off and buy a new computer so they
are "safe".

 

[Theinsanegamer]

Another step toward the obsolescence of older hardware. Your PC may run, for awhile, but then they'll dream-up a new reason (I.e. missing certificates) that'll limit you. Should put the final nail in the coffin for that perfectly fine but pesky old hardware. They want their $$$$ and they want it ASAP.

Your old hardware will continue to function just fine. It just wont receive updates for secure boot vulnerabilities.

How many people do you know were going out of their way to update their Secure Boot BIOS files?

 

[Liranan]

Secure Boot is disabled on all of my machines. M$hite can go to hell with this nonsense that was hacked long ago.

 

[maxxcool7421]

Bazzite, steamos ... suxk it MS

 

[umeng2002]

If your BIOS supports it, turn it off.

 

[Rapob]

Bazzite, steamos ... suxk it MS

Linux is still overall garbage for gaming unless you are a casual gamer, that will accept a very limited game catalog, accept crashes or issues related to Proton comp. layer or sacrifice performance. Linux is absolutely not a good alternative for serious PC gamers, using newer hardware, playing newer games.

Limited game catalog. Worse performance in 99% of games. Zero dev support. Lack of anti cheat leads to many multiplayer games not working, Only multiplayergames riddled with cheaters work in Linux. CS2 is a good example. Serious players use private servers as a result.

Valve lowered anti cheat requirement in CS2 so it would run in Steam OS. Result: Cheating is easy.

However, most "Linux gamers" are old men playing old singleplayer games on old hardware. And then they claim Linux is good for gaming, while looking at 30-60 fps with drops. Baffling. Yet Laughable.

Linux has just 2-3% marketshare. Just like MacOS. Nothing really changed much. Linux still gets no official support in new games.

Most of this miniscule marketshare stems from Steam Deck or people "playing around" with Linux gaming on secondary devices. Literally 100% of serious PC gamers runs Windows as their primary OS. There is no good alternative to Windows yet.

They can play the entire PC game catalog and get overall best performance with Windows, so the choice is very easy. Drivers from AMD/Nvidia/Intel, 100% Windows focussed when talking consumer hardware, as well.

95% of the user base on Steam runs Windows.
100% of PC games has Windows listed in the requirements. Game devs don't care at all if games work or don't work in Linux.

I think Microsoft is fairly relaxed. Thanks for a free laugh tho.

Linux is still a fragmented mess. The few 2-3% Linux marketshare is split between 25+ distros, each with fanboys that hates the other fanboys. This is still Linux biggest problem today; Massive fragmentation. And this is why no or very few software developers even care with Linux support. Niche market. Most of its users, don't want to pay for software anyway. They want free.

Proton is the primary reason gaming on Linux has gotten better, and it works mainly as a compatibility layer that translates API calls. PC games are made for Windows. Hence why Proton is needed to begin with.

Steam Deck and Steam Machine, low-end hardware made for running old games. Trash for newer games.

Actual demanding/serious gamers, with focus on performance, that won't accept a limited game catalog, runs Windows.

MacOS and Linux, is for casual gamers. That is reality.

 

[VariableSpike]

Linux is still overall garbage for gaming unless you are a casual gamer, that will accept a very limited game catalog, accept crashes or issues related to Proton comp. layer or sacrifice performance. Linux is absolutely not a good alternative for serious PC gamers, using newer hardware, playing newer games.

Limited game catalog. Worse performance in 99% of games. Zero dev support. Lack of anti cheat leads to many multiplayer games not working, Only multiplayergames riddled with cheaters work in Linux. CS2 is a good example. Serious players use private servers as a result.

Valve lowered anti cheat requirement in CS2 so it would run in Steam OS. Result: Cheating is easy.

However, most "Linux gamers" are old men playing old singleplayer games on old hardware. And then they claim Linux is good for gaming, while looking at 30-60 fps with drops. Baffling. Yet Laughable.

Linux has just 2-3% marketshare. Just like MacOS. Nothing really changed much. Linux still gets no official support in new games.

Most of this miniscule marketshare stems from Steam Deck or people "playing around" with Linux gaming on secondary devices. Literally 100% of serious PC gamers runs Windows as their primary OS. There is no good alternative to Windows yet.

They can play the entire PC game catalog and get overall best performance with Windows, so the choice is very easy. Drivers from AMD/Nvidia/Intel, 100% Windows focussed when talking consumer hardware, as well.

95% of the user base on Steam runs Windows.
100% of PC games has Windows listed in the requirements. Game devs don't care at all if games work or don't work in Linux.

I think Microsoft is fairly relaxed. Thanks for a free laugh tho.

Linux is still a fragmented mess. The few 2-3% Linux marketshare is split between 25+ distros, each with fanboys that hates the other fanboys. This is still Linux biggest problem today; Massive fragmentation. And this is why no or very few software developers even care with Linux support. Niche market. Most of its users, don't want to pay for software anyway. They want free.

Proton is the primary reason gaming on Linux has gotten better, and it works mainly as a compatibility layer that translates API calls. PC games are made for Windows. Hence why Proton is needed to begin with.

Steam Deck and Steam Machine, low-end hardware made for running old games. Trash for newer games.

Actual demanding/serious gamers, with focus on performance, that won't accept a limited game catalog, runs Windows.

MacOS and Linux, is for casual gamers. That is reality.

What in the unholy windows fanboy slop is this lmao
All I will say is my game catalogue is full of games to play, and I've not used Windows outside of work for a year and a half, no rando essay needed

 

[Rapob]

What in the unholy windows fanboy slop is this lmao
All I will say is my game catalogue is full of games to play, and I've not used Windows outside of work for a year and a half, no rando essay needed

Yeah your game catalog full of old games or indie games will probably run at the 30 fps you demand

 

[Win7user]

You talk about "no customer service" concerning these very important updates, by to many ungrateful companies. If I knew who in each of these companies was responsible for this BS, I would sock him or her right in the eye!! I'll do the time.

 

[yRaz]

Yeah your game catalog full of old games or indie games will probably run at the 30 fps you demand

Noone is saying you have to use Linux or you can't prefer M$ for gaming, but the number of outright false claims you make about Linux gaming is absurd. This isn't 2015. The majority of what you say about Linux gaming hasn't been true for over a decade. The fact you are making those claims shows you zero experience with modern Linux and, more likely, Linux in general.

 

[Infernus]

 

[Infernus]

I use Windows 11 LTSC IoT. I have secure boot off it's been off for years. The games I play don't require secure boot to be on. I am not upgrading my BIOS my PC is perfectly stable and if it ain't broke don't fix it. I don't care what MS says, it's staying off.

 

[Rapob]

Noone is saying you have to use Linux or you can't prefer M$ for gaming, but the number of outright false claims you make about Linux gaming is absurd. This isn't 2015. The majority of what you say about Linux gaming hasn't been true for over a decade. The fact you are making those claims shows you zero experience with modern Linux and, more likely, Linux in general.

You are clueless. I have been using Linux for 20 years and yeah, everything what I say is pure fact. From marketshare to games not working.

Linux is gold, for servers. Which is what I mainly use it for. For gaming? Absolutely not. But I have tried it tons of times, in the last 15-20 years. Just because Proton improved does not mean Linux is "good for gaming"

I laugh out loud when people claim Linux is good for gaming.

You have absolutely zero experience with playing games on a high-end gaming PC if you think that.

I play games with several hundred fps at 360-500 Hz OLED. 9800X3D at 5.5 GHz on all cores. 32GB runing 1:1 at 6400/28. RTX 4090 with OC and UV.

Once you have seen games running at 200+ fps 1% lows with 400 fps avg. You will understand why people don't use Linux for gaming.

There is a reason why NO serious gamers, pro gamers and streamers uses Linux for gaming.

Casuals playing old single player games, and indie games, is the segment that praises Linux for gaming, while looking at 30-60 fps.

 

[yRaz]

You are clueless. I have been using Linux for 20 years and yeah, everything what I say is pure fact. From marketshare to games not working.

Linux is gold, for servers. Which is what I mainly use it for. For gaming? Absolutely not. But I have tried it tons of times, in the last 15-20 years. Just because Proton improved does not mean Linux is "good for gaming"

I laugh out loud when people claim Linux is good for gaming.

You have absolutely zero experience with playing games on a high-end gaming PC if you think that.

I play games with several hundred fps at 360-500 Hz OLED. 9800X3D at 5.5 GHz on all cores. 32GB runing 1:1 at 6400/28. RTX 4090 with OC and UV.

Once you have seen games running at 200+ fps 1% lows with 400 fps avg. You will understand why people don't use Linux for gaming.

There is a reason why NO serious gamers, pro gamers and streamers uses Linux for gaming.

Casuals playing old single player games, and indie games, is the segment that praises Linux for gaming, while looking at 30-6

The gamers you speak of use Windows for gaming because anti cheat forces them to. You talking about frame limits is outright false. I highly doubt you have 20 years of Linux experience or else you'd know what you're saying is BS.

But if you want to spend you're time being a Mindless hater in the internet we can all just block you. You use every chance you get to talk about how much you hate Linux. I don't know where Linux touched you, but it's over now. You're going to be okay

 

[Rapob]

The gamers you speak of use Windows for gaming because anti cheat forces them to. You talking about frame limits is outright false. I highly doubt you have 20 years of Linux experience or else you'd know what you're saying is BS.

But if you want to spend you're time being a Mindless hater in the internet we can all just block you. You use every chance you get to talk about how much you hate Linux. I don't know where Linux touched you, but it's over now. You're going to be okay

Linux is garbage for gaming unless you are a casual gamer. Hence why weak Steam Deck and Steam Machine uses low-end hardware, meant to play old games and indie games.

Reality hurts I see. Linux is still trash for gaming and you have no clue on how to build high-end gaming rigs, or how games can actually run on said hardware. If so, you would not insist that Linux is good for gaming.

It is literally trash.

Hence why no serious gamers, pro gamers or streamers installs Linux as primary OS. Fullblown garbage when you want to play newer games on newer hardware.

Linux is good for servers, and thats about it. This is where my Linux experience stems from. Not casual desktop/gaming usage.

Accept reality. This is why PC gamers are aimed at Windows. 95% marketshare, no-one builds a new expensive gaming machine just to gimp it with Linux.

You can go cry in a corner, won't change reality. Only a casual gamer can be satisfied with Linux.

 

[yRaz]

Linux is garbage for gaming unless you are a casual gamer. Hence why weak Steam Deck and Steam Machine uses low-end hardware, meant to play old games and indie games.

Reality hurts I see. Linux is still trash for gaming and you have no clue on how to build high-end gaming rigs, or how games can actually run on said hardware. If so, you would not insist that Linux is good for gaming.

It is literally trash.

Hence why no serious gamers, pro gamers or streamers installs Linux as primary OS. Fullblown garbage when you want to play newer games on newer hardware.

Linux is good for servers, and thats about it. This is where my Linux experience stems from. Not casual desktop/gaming usage.

Accept reality. This is why PC gamers are aimed at Windows. 95% marketshare, no-one builds a new expensive gaming machine just to gimp it with Linux.

You can go cry in a corner, won't change reality. Only a casual gamer can be satisfied with Linux.

You claimed to have 20 years of Linux experience but I don't believe that. I find it more likely that you're in your 20's. I don't know why you have chosen such a silly fight, but have at it all you want

 

[netman]

Phuck Microsoft....

 

[Deathdealers747]

Ah... Microsoft... Global DRAM and NAND price increases, Global PCB Production Cost Increases, and they're approach? Force people to upgrade their hardware or force them into doing a BIOS update that could brick their hardware if done wrong.

I can't wait till the day comes when we get a Linux/Unix OS that is built similar to several new-age cell phones (the ones with more freedoms and less restrictions).

 

[Rapob]

You claimed to have 20 years of Linux experience but I don't believe that. I find it more likely that you're in your 20's. I don't know why you have chosen such a silly fight, but have at it all you want

Luckily I could not care less what you believe

I bet you are a Linux beginner, that just installed a casual distro and now thinks you are a guru

 

[Win7user]

As much as I sometimes struggle with operating Linux Mint, it beats the alternative. Microsoft Windows, the arrogant, entitled, data mining, and greedy Microsoft/Windows operating system. The operating system you and I have paid for, but don't own, nor do we control what we do with OUR purchased operating system!

 

[fadingfool]

I play games with several hundred fps at 360-500 Hz OLED. 9800X3D at 5.5 GHz on all cores. 32GB runing 1:1 at 6400/28. RTX 4090 with OC and UV.

Which puts you in a small privileged percentage of gamers.
I play games at 75Hz 1440p (IPS panel - great for work, pretty enough for games) on a i9 7980XE 4.2 GHz all cores, 48GB with a 7800XT (I also work on this PC - databases, VMs etc.) and that puts me in the upper echelons of gamers according to the Steam survey.
I also game on a PS5, PS4 pro and switch 2 (and my raspberry pi - great for retro gaming). This though makes me a lousy "casual" gamer

- you have great rig and I'm sure it brings you much joy.

Windows though sucks and was poor for gaming back in Win '95 days (proper gamers booted into DOS first) - win11 has had so many problems and it is only because of DRM and Anti-cheat that I don't dual-boot into Linux for gaming.