According to the latest update, without properly revised certificates, Windows Secure Boot will stop working and can no longer guarantee secure startups. On June 24th, several older Microsoft certificates expired, meaning that many Windows 10 and 11 users need to patch their computers.
The report highlights that the publisher explains on this support page:. However, it’s now confirmed that Microsoft has temporarily suspended the issuance of fresh certificates for certain PCs, including a number of HP models.
According to the latest update, some devices require a firmware patch from the PC manufacturer before you can install the necessary Secure Boot updates. Many OEMs are actively releasing these firmware updates through their standard patch channels. If a firmware patch is required, check your OEM’s Secure Boot support page for next steps. On the vast majority of PCs, the full set of Secure Boot certificates install automatically through Windows Revision.
As part of the ongoing story, in some cases, Windows Security might indicate that Secure Boot certificate updates are temporarily paused or blocked by displaying one of these messages:.
As part of the ongoing story, to reduce risk, Secure Boot certificate updates are temporarily paused while Microsoft and partners work toward a supported resolution. Contact your device manufacturer for assistance. 1) Devices in this group are affected by a known issue.
Industry observers note that contact your device manufacturer for assistance. 2) Secure Boot is on, but your device does not support the automated Secure Boot certificate patch due to devices or firmware limitations.
As part of the ongoing story, until HP and other affected computer manufacturers have provided fresh firmware, it will not be possible to patch the relevant Secure Boot certificates, reports Windows Current.
In a fresh development, if you’re affected by this problem, you have no choice but to wait for a solution from Microsoft and HP. You can’t force the Secure Boot patch. The risk of running into trouble due to outdated certificates is currently low, but is likely to increase over time.
Industry observers note that here’s what Microsoft has to say about PCs with Secure Boot certificates that remain un-revised:.
As part of the ongoing story, standard Windows updates will still be installed. However, as fresh security updates are dropped that address threats to the early boot process, your device won’t be able to receive them and won’t get the most recent protections. If your device reaches the expiration date without the fresh certificates, it will continue to start and operate normally.
The report highlights that mechanics that rely on Secure Boot—such as device encryption or certain startup programs—might also stop working properly if they require revised security protection. Over time, as fresh threats emerge, a device in this expired state becomes progressively less protected.
Industry observers note that to learn more, see our comparison of Windows 11 Home and Pro. If you want to upgrade, snag it for cheap in the PCWorld Applications Store: now just $59 instead of $99. By the way: If you’re using Windows 11 Home, you’re missing out on the many benefits of Windows 11 Pro.
As part of the ongoing story, this article originally appeared on our sister publication PC för Alla and was translated and localized from Swedish.