Updates and announcements

Применяется к
Windows 10 Windows 10, version 1607, all editions Win 10 Ent LTSC 2019 Win 10 IoT Ent LTSC 2019 Windows 10 IoT Core LTSC Windows 10 Enterprise LTSC 2021 Windows 10 IoT Enterprise LTSC 2021 Windows 10, version 22H2, all editions Windows 11 Home and Pro, version 21H2 Windows 11 Enterprise Multi-Session, version 21H2 Windows 11 Enterprise and Education, version 21H2 Windows 11 IoT Enterprise, version 21H2 Windows 11 Home and Pro, version 22H2 Windows 11 Enterprise Multi-Session, version 22H2 Windows 11 Enterprise and Education, version 22H2 Windows 11 IoT Enterprise, version 22H2 Windows 11 SE, version 23H2 Windows 11 Home and Pro, version 23H2 Windows 11 Enterprise and Education, version 23H2 Windows 11 Enterprise Multi-Session, version 23H2 Windows 11 SE, version 24H2 Windows 11 Enterprise and Education, version 24H2 Windows 11 Enterprise Multi-Session, version 24H2 Windows 11 Home and Pro, version 24H2 Windows 11 IoT Enterprise, version 24H2 Windows Server 2012 ESU Windows Server 2012 R2 ESU Windows Server 2016 Windows Server 2019 Windows Server 2022 Windows Server 2025

Note

  • Original publish date: February 24, 2026
  • KB ID: 5081884
Change Log
Change Date Change Description
June 29, 2026
  • New updates have been added to the Announcement history for June 24th and 29th.
June 23, 2026
  • New updates have been added to the Announcement history for June 4th thru July 15th.
May 21, 2026
  • New updates have been added to the Announcement history for April 3rd thru June 4th.
April 2, 2026
  • A new update has been added to the Announcement history for April 2nd.
March 23, 2026
  • New updates have been added to the Announcement history for March 10 thru April 23rd.
February 27, 2026
  • A new update has been added to the Announcement history for February 23rd.

Overview

This page provides updates and announcements related to the deployment of new Secure Boot certificates on Windows devices. It highlights significant milestones, changes in rollout status, and important communications that may affect device readiness, management, or servicing. Updates are published as the deployment progresses and are intended to help customers, IT professionals, and partners stay informed about notable developments.

Updates and announcement history

The table below lists significant announcements and updates related to the Secure Boot certificate deployments, in chronological order from newest to oldest.

Date Announcements
July 15, 2026 OEM Secure Boot Office Hours
July 8, 2026 Secure Boot Office Hours for virtualized environments
July 1, 2026 Ask Microsoft Anything: Windows Server Secure Boot
June 29, 2026 If you’re prevented from updating Secure Boot certificates published.
June 24, 2026 What IT teams need to know about Linux Secure Boot certificates expiring in 2026 published.
June 23, 2026 Best practices for deploying Secure Boot certificate updates - Windows IT Pro Blog published.
June 4, 2026 On demand: Ask Microsoft Anything: Secure Boot
May 19, 2026 Updated Secure Boot status report in Windows Autopatch - Windows IT Pro Blog published.
May 18, 2026 On demand: Ask Microsoft Anything: Secure Boot
May 13, 2026 Secure Boot update from 2011 to 2023 certificates: Trusted Launch VMs (TVM) and Confidential VMs (CVM) published.
April 27, 2026 Assess Secure Boot status with Microsoft Defender published.
April 23, 2026 On demand: Ask Microsoft Anything: Secure Boot
April 3, 2026 Updated: Sample Secure Boot E2E Automation Guide
April 2, 2026 Secure Boot certificate update status in the Windows Security app published.
IT admin guide: Secure Boot certificate update status in the Windows Security app published.
March 19, 2026 Secure Boot troubleshooting guide published.
March 16, 2026 A how-to guide for customers that want to deploy to their fleet in a gradual manner. Documentation and sample PowerShell scripts are published here: Sample Secure Boot E2E Automation
March 12, 2026 On demand: Ask Microsoft Anything: Secure Boot
March 10, 2026 A Closer Look at the High Confidence Database published.
March 9, 2026 Deep dive: Secure Boot certificate updates explained
February 23, 2026 Windows Server playbook and call to action blog posts published.
Windows Server Secure Boot playbook for certificates expiring in 2026
Prepare your servers for Secure Boot certificate updates
February 18, 2026 A how-to page for Intune users for deploying scripts and a dashboard for monitoring the status of devices managed by Intune.
Monitoring Secure Boot certificate status with Microsoft Intune remediations
February 13, 2026 The Sample Secure Boot Inventory Data Collection script was updated with improved coverage and reliability.
February 10, 2026
February 9, 2026
Made significant updates to the Secure Boot DB and DBX variable update events page, including adding some new events and summary information on the device specific events.
February 10, 2026 Added guidance on When Secure Boot certificates expire on Windows devices and how they behave if the new certificates are not present.
February 10, 2026 February Cumulative Updates included additional High Confidence devices
February 5, 2026 On demand: Ask Microsoft Anything: Secure Boot - February 2026
January 13, 2026 January Cumulative Updates included first drop of High Confidence devices
December 10, 2025 On demand: Ask Microsoft Anything: Secure Boot - Dec. 2025
November 13, 2025 Secure Boot playbook for certificates expiring in 2026 published.