Windows 11 is refreshing Secure Boot keys in 2026. Here's why TPM-WMI Event ID 1801 appears, and how to verify the new certificate.

Get ye to Windows Update, because there's a good chance you've got new Secure Boot certificates to install. Microsoft just ...

One of those was UEFI Secure Boot, a mechanism for verifying PC bootloaders to ensure that unverified software can’t be loaded at startup. Secure Boot was enabled but technically optional for Windows ...

Microsoft has recently begun replacing expiring Secure Boot certificates on eligible Windows 11 systems running 24H2 and 25H2 ...

Microsoft is reminding users that the Secure Boot ecosystem will soon require a mandatory check-up. The Redmond-backed security protocol, part of the UEFI specification and primarily ...

Refreshing new certificates represents one of the largest coordinated security maintenance efforts across the Windows ecosystem,' Microsoft explains.

Secure Boot helps keep your computer safe by using trusted certificates in UEFI firmware. It checks bootloaders and prevents dangerous applications from running before Windows starts. Through Secure ...

Microsoft has begun rolling out updated Secure Boot certificates through monthly Windows updates to replace the original 2011 certificates that will expire in late June 2026.

Microsoft adds a Secure Boot status report to Intune, helping IT admins track certificate updates and reduce security risks.

Microsoft is preparing to roll out new Secure Boot certificates via Windows Update to keep old PCs protected from boot‑level ...

Windows 11 February 2026 update adds Cross-Device Resume, MIDI upgrades, security fixes, and major bug fixes for 24H2 and 25H2.