Vital Windows 11 certificates are expiring: how to check if you're affected | PCWorld

Microsoft is replacing expiring Secure Boot certificates on eligible Windows 11 systems running 24H2 and 25H2. Devices manufactured before 2024 are particularly affected. Secure Boot is a security feature that prevents malicious software from running during system startup. Users should check if their PC starts with Secure Boot and install the new certificates before June 2026 to avoid potential issues.