Provides a link to Microsoft Security Advisory: Incorrectly issued digital certificates could allow spoofing.

Provides a link to Microsoft security advisory (3097966): Inadvertently Disclosed Digital Certificates Could Allow Spoofing.

Resolves a vulnerability in the Secure Channel (SChannel) security package in Windows that could allow spoofing if an attacker gains access to the certificate that is used by the end-user for authentication.

This security update resolves Microsoft SharePoint Server Remote Code Execution vulnerability and Microsoft SharePoint Server Spoofing vulnerability. To learn more about the vulnerabilities, see the following security advisories:

It works by verifying the digital signature of pre-boot software against a set of trusted digital certificates (also known as certificate authority or CA) stored in the device's firmware.

Updates are published as the deployment progresses and are intended to help customers, IT professionals, and partners stay informed about notable developments. Updates and announcement history The table below lists significant announcements and updates related to the Secure Boot certificate deployments, in chronological order from newest to oldest.

Introduction Microsoft is rolling out updated Secure Boot certificates to Windows devices to maintain protection against evolving boot-level threats. Most devices receive these updates automatically through Windows Update. This article explains why some devices are blocked from updating Secure Boot certificates, what this means, and what actions you can consider.

Additionally, the new Secure Boot certificate status indicators are disabled by default on Windows Server, regardless of whether the service is running. This is by design. It's assumed that IT administrators are likely to manage Secure Boot certificate updates centrally rather than relying on per-device user-facing notifications and text.

Take action To protect your environment, complete the following steps for certificate-based authentication: Update all servers that run Active Directory Certificate Services and Windows domain controllers that service certificate-based authentication with the May 10, 202,2 update (see Compatibility mode).

Microsoft Secure Boot certificates, originally issued in 2011, are approaching expiration in 2026. Updated 2023 certificates are being delivered automatically through Windows Update. The Windows Security app now shows whether your device has received these updates, what your current status is, and whether any action is needed.