Learn how to check if your PC is capable of running TPM 2.0 or how to enable TPM 2.0 to upgrade to Windows 11.

Secure Boot is a security feature in Unified Extensible Firmware Interface (UEFI) based firmware that helps ensure that only trusted software runs during a device's boot (start) sequence.

To see details about the certificate, click View Certificate. The email encryption certificate details for the messages that you send or receive can be reviewed.

Enables administrators to configure domain-joined computers to use the auto update feature for both trusted and disallowed Certificate Trust Lists (CTLs). The computers can use the auto update feature without accessing the Windows Update site.

You can view information about a digital signature, or the certificate that is used to create the digital signature, in Word, PowerPoint, and Excel. For more information on adding or removing digital signatures, see Add or remove a digital signature.

Find how-to articles, videos, and training for Microsoft Copilot, Microsoft 365, Windows 11, Surface, and more.

To run a Control Panel tool in Windows, type the appropriate command in the Open box or at a command prompt. NOTE: If you want to run a command from a command prompt, you must do so from the Windows folder.

Secure Boot helps ensure that your device starts using trusted software. The Microsoft Secure Boot certificates originally issued in 2011 begin expiring in June 2026. To maintain protection against new boot‑level threats, Microsoft is updating devices with a new set of 2023 certificates.

Digital signatures provide assurances about the validity and authenticity of digital documents.

Learn how to find your BitLocker recovery key in Windows.