To help protect the security of the Windows operating system, updates were previously signed (using both the SHA-1 and SHA-2 hash algorithms). The signatures are used to authenticate that the updates come directly from Microsoft and were not tampered with during delivery.

Most devices manufactured since 2012 have support for Secure Boot and are shipped with Secure Boot enabled. To verify that a device has Secure Boot enabled, do one of the following: GUI Method: Go to Start > Settings > Privacy & Security > Windows Security > Device Security.

System File Checker (SFC) is a Windows tool that checks system files for corruption and helps fix problems that may cause Windows to malfunction. To run it, follow these steps:

The guidance explains how to verify Windows servicing and configuration, review relevant registry values and event logs, and identify when firmware or platform limitations require an OEM update.

If you’re currently running Windows 10, PC Health Check provides a comprehensive eligibility check for your device to ensure it meets the Windows 11 minimum system requirements.

Learn how to check if a version of Windows supports multiple languages or is limited to a single language.

This document describes support for deploying, managing, and monitoring the Secure Boot certificate updates using Windows registry keys. The keys consist of the following:

Learn how to check if your PC is capable of running TPM 2.0 or how to enable TPM 2.0 to upgrade to Windows 11.

Décrit comment utiliser l’outil Vérificateur de fichiers système pour résoudre les problèmes liés aux fichiers système manquants ou endommagés dans Windows.

Most Windows devices will receive the updated certificates automatically, and many OEMs provide firmware updates when needed. Keeping your device current with these updates helps ensures it can continue receiving the full set of security protections that Secure Boot is designed to provide.