Urgent: Windows Secure Boot Certificate Expiration Set for June 2026

Microsoft has issued an urgent alert for Windows users, citing an impending expiration of Secure Boot certificates by June 24, 2026, which could disrupt system integrity and cybersecurity protocols. The deadline, confirmed by multiple sources including BornCity and AD HOC NEWS, requires users to update digital signatures on affected devices to prevent potential boot failures or vulnerabilities.

The Secure Boot process, a core security feature in modern computing, verifies the authenticity of firmware and operating systems during startup. According to heise online, the expiring certificates—issued by trusted authorities—could leave systems exposed to unauthorized modifications if not replaced. Microsoft’s Autopatch service, highlighted by notebookcheck.com, is being updated to automate this renewal process for eligible devices, though manual intervention remains necessary for older hardware.

HP users face heightened risks, as AD HOC NEWS reported that the company’s enterprise and consumer models are particularly vulnerable due to outdated certificate configurations. A spokesperson for HP stated the company is collaborating with Microsoft to distribute updates but warned that some legacy systems may require hardware replacements to comply with new security standards.

Security researchers cited by it boltwise warned that the deadline coincides with emerging threats, including AI-driven attacks targeting boot-sector vulnerabilities. While no active exploits have been confirmed, the combination of expired certificates and evolving cyber tactics has prompted federal agencies to issue guidance for organizations reliant on Windows infrastructure.

Microsoft’s deadline remains in effect, with the company emphasizing that non-compliance could result in devices being unable to boot or being flagged as insecure by network administrators. The firm has launched a dedicated support portal for users seeking assistance, but technical challenges persist for users without access to IT resources.