Installing Windows 11 on devices that do not meet minimum system requirements is unsupported and is not recommended by Microsoft.

Mitigations against the Secure Boot bypass detailed in CVE-2023-24932 are included in the Windows security updates that were released on July 9, 2024, and later updates. However, these mitigations are not enabled by default. With these updates, we recommend that you begin evaluating these changes within your environment.

In this article Overview How a Secure Boot certificate servicing works Where to start when troubleshooting Secure-Boot-Update scheduled task Why a scheduled task is used The AvailableUpdates registry bitmask Integration with OEM firmware Common failure scenarios and resolutions Reference and internals AvailableUpdates bits used for certificate servicing Expected progression (AvailableUpdates ...

Plan and perform Secure Boot certificate updates across your device fleet through preparation, monitoring, deployment, and remediation. Verifying Secure Boot status across your fleet: Is Secure Boot enabled? Most devices manufactured since 2012 have support for Secure Boot and are shipped with Secure Boot enabled.

Boot sessions : Your device must have been rebooted at least 3 times (2 times on Windows Server) since evaluation began. No policy violations : If a driver that would be blocked is loaded during the evaluation period, the uptime and boot session counters are reset to zero , extending the evaluation period.

Opmerking: Microsoft werkt Secure Boot-certificaten bij die oorspronkelijk zijn uitgegeven in 2011 en die zijn ingesteld om te verlopen in juni 2026. Als op uw pc een ondersteunde versie van Windows wordt uitgevoerd, wordt deze update automatisch uitgevoerd. Raadpleeg deze richtlijnen voor meer informatie.

After the Secure Boot certificates expire, devices that haven’t received the newer 2023 certificates will continue to start and operate normally, and standard Windows updates will continue to install. However, these devices will no longer be able to receive new security protections for the early boot process, including updates to Windows Boot Manager, Secure Boot databases, revocation lists ...

Learn how to change settings to enable Secure Boot if you are not able to upgrade to Windows 11 because your PC is not currently Secure Boot capable.

Sicherer Start ist ein Sicherheitsfeature, das verhindert, dass schadhafte Software geladen wird, wenn ein Windows-PC gestartet wird. Es funktioniert, indem nur vertrauenswürdige, digital signierte Software während des Startvorgangs ausgeführt werden kann. Die meisten modernen PCs unterstützen den sicheren Start, aber bestimmte Firmwareeinstellungen können dazu führen, dass ein Gerät so ...

Introduction This document describes support for deploying, managing, and monitoring the Secure Boot certificate updates using Windows registry keys. The keys consist of the following: One key to trigger the deployment of the certificates and boot manager on the device. Two keys for monitoring status of the deployment.