Microsoft has used a second public question-and-answer session to warn Windows 11 users about a deadline that is now only days away. A security certificate that helps power Secure Boot is set to expire on 24 June 2026, and businesses running Windows 11 should make sure their machines are ready.
Secure Boot is a quiet but important protection. It checks that only trusted, untampered software is allowed to load when a computer first switches on. That early stage is a favourite target for attackers, because malicious code that loads before Windows can hide from your antivirus and even survive a reinstall. Secure Boot is the gatekeeper that keeps that from happening.
Why the deadline matters
The certificates that Secure Boot relies on were issued years ago and, like any certificate, they have an expiry date. When the current one lapses on 24 June, devices that have not received the updated certificate through Windows Update may stop receiving future boot-level security protections. In plain terms: your PC keeps working, but a layer of its defence can quietly fall behind unless it is refreshed in time.
Three practical steps for your business
- Keep Windows Update on and current. The updated certificates are delivered through Windows Update. A machine that is patched and restarted regularly is most of the way there.
- Confirm Secure Boot is actually enabled. Some older or custom-built PCs have it switched off. If it is off, both the protection and the update pass you by.
- Flag the odd ones out. Older laptops, specialist or industrial machines, and devices that are rarely turned on are the most likely to miss the deadline. These deserve a manual check.
For most small businesses this is manageable housekeeping rather than an emergency, but the date is fixed and it is close. The PCs most at risk are exactly the ones nobody has looked at in a while.
Worried this affects your business? Get a free 15-minute IT check – call Trends IT on 0485 011 911 or visit /contact/.