Search

Most Windows PCs have had the 2023 Secure Boot certificates pushed to them already. If you see a green checkmark, you’re set and don’t have to worry any further. If you have a yellow or red warning, you’ll have to get more involved with your PC—seeing if your computer will get support from its manufacturer, if you need to perform a manual UEFI/BIOS update, etc. You can read more about what to do (and how to do it) in our Secure Boot update guide. Microsoft will automatically push the 2023 Secure Boot certificates to PCs able to support them. (That’s why you may need to update your PC’s UEFI/BI

Your next steps depend on if your PC has received a yellow or red warning. Yellow generally means you just have to sit tight awhile longer (and be sure that your UEFI/BIOS is up to date). Red might mean your PC won’t get the new Secure Boot certificates. Some manufacturers have stated support has ended for certain end-of-life products. This means you won’t get the UEFI/BIOS update needed for the newer 2023 certificates. In such an unfortunate situation, you have two main options. To stay on Windows, you’ll have to buy a new PC. Alternatively, you’ll need to get comfortable with Linux—specifica

Unfortunately, Microsoft doesn’t decide if your PC will get updated Secure Boot certificates. The vendors who manufactured your hardware do. They must issue firmware that will support the new certs. If they don’t, you’re out of luck. How will you know? For prebuilt PCs and laptops from makers like Dell, Lenovo, HP, etc, their Secure Boot update guides may outline the policy. For computer components, their support pages may outline that info. If you can’t find this information, try support forums for further info. Pragmatically speaking, if your PC’s manufacturer no longer supports your compute

The new security policy applies to: Windows 11 version 24H2 and later Windows Server 2025 The rollout begins with the April 2026 update and will thereafter be a permanent feature of new Windows versions.