Microsoft warns about Windows 11 security certificates expiring in June
Starting in June 2026, a key security component of Windows 11 will silently stop working. Old Inicialização Segura certificates installed since 2011 will expire on June 24, leaving PCs without updated protection during the boot process.
Microsoft has been implementing for months a new chain of certificates dated 2023 to replace those expiring in the next semester. The company has increased the number of warning messages on computers with Windows 11. If your PC does not receive the specific update, it will continue to boot normally, but with reduced protection from the moment of connection.
What is the June Inicialização Segura Update
Inicialização Segura is protection built into the UEFI firmware of modern computers. Sempre Once the machine is powered on, the system checks whether critical components such as Gerenciador Inicialização Windows are signed with trusted certificates. Qualquer unknown code detected in the boot chain is blocked even before Windows 11 is loaded.
Legacy certificates from 2011 are reaching the end of their useful life. Microsoft replaces them with a new string called “Secure Boot 2023”. Essa operation affects both Windows and UEFI firmware, explaining gradual implementation with varying degrees of success depending on the PC model.
More on this story: Critical Windows security update will require multiple restarts
Quais risks for PCs without the update
Microsoft rules out the scenario of a PC running Windows 11 suddenly becoming unusable. Não will abruptly shut down or immediately block standard updates. The danger lies in a much more subtle “degraded security state” at the boot level.
Sem the 2023 certificates, your PC will no longer be able to download future DBX revocation lists. Essas lists block subsequently discovered bootkits and prevent compromised code from being loaded before antivirus software is installed. As new threats emerge, a computer still using the old system becomes progressively more vulnerable.
Additional Consequência anticipated: Windows 11 major updates will eventually require 2023 certificates to install. Version 26H2 will still be an exception, but subsequent versions may reject your computer if the new Inicialização Segura chain is not present. Essa requirement aims to prevent failed updates or unstable boot processes.
See Also
Como check certificate status
Scanning your system takes just a few clicks:
- Abra the Segurança application of Windows
- Acesse the “Device Security” section
- Selecione “Secure Boot”
- Verifique the status indicator for 2023 certificates
If your PC remains in alert mode after this check, install all available updates through “Settings” and then “Windows Update”. Reinicie the computer and check the status again.
Learn more: Critical flaw in Microsoft’s Secure Boot allowed security bypass for more than ten years
If the indicator does not change, check with your PC or motherboard manufacturer for newer UEFI firmware. Após update the firmware, recheck the status of the Inicialização Segura to confirm that the migration was completed successfully.
Implementação gradual in different models
The implementation of the new certificate chain is not uniform across all computers. Diferentes Motherboard and PC manufacturers roll out UEFI firmware updates at different paces, which may explain why some users see successful migration while others still receive warnings from Microsoft.
Esse gradual rollout pattern has been predicted by Microsoft since announcing the change. The company has scheduled increasing warnings over the months to give hardware manufacturers time to update their firmware and users time to install necessary updates before the final expiration date.
