Windows 11 is refreshing Secure Boot keys in 2026. Here's why TPM-WMI Event ID 1801 appears, and how to verify the new certificate.

Microsoft has begun rolling out updated Secure Boot certificates through monthly Windows updates to replace the original 2011 certificates that will expire in late June 2026.

Get ye to Windows Update, because there's a good chance you've got new Secure Boot certificates to install. Microsoft just ...

Refreshing new certificates represents one of the largest coordinated security maintenance efforts across the Windows ecosystem,' Microsoft explains.

Microsoft is reminding users that the Secure Boot ecosystem will soon require a mandatory check-up. The Redmond-backed security protocol, part of the UEFI specification and primarily ...

Microsoft has recently begun replacing expiring Secure Boot certificates on eligible Windows 11 systems running 24H2 and 25H2 ...

Microsoft is preparing to roll out new Secure Boot certificates via Windows Update to keep old PCs protected from boot‑level ...

In June 2025, Microsoft announced that, in June 2026, it would begin deprecating Secure Boot certificates of Windows systems ...

Microsoft is in the middle of a Secure Boot certificate transition that many users will not notice until it becomes a problem. Several long-standing certificates used by Windows devices are ...

Secure Boot is one of the requirements for Windows 11. You cannot install Windows 11 until you enable Secure Boot in your BIOS. However, there are ways by which you ...

Among the requirements for installing Windows 11 are two security features: Trusted Platform Module (TPM) version 2.0 and Secure Boot. As we’ve documented before ...

Microsoft has made Windows 11 available for all users. Windows 10 users can upgrade their computers to Windows 11 for free, provided their computers meet the hardware requirements. One of these ...