Check your Windows Secure Boot status now. Later could be too late

Modern PCs support the Windows Secure Boot feature via their UEFI firmware. This ensures that the computer blocks malware, such as rootkits, even before the operating system starts. The Secure Boot function uses keys, certificates, and signature databases to ensure the integrity of the boot components.

The certificates used to date date back to 2011 and were due to expire in June 2026. The new certificates have been rolling out since 2023, and the update is applied automatically either via a firmware update or via Windows Update. You can check whether the update has been successful using the Windows Security app.

Open the Windows “Settings” from the Start menu, then click on “Privacy & Security > Windows Security > Open Windows Security.” Click on “Device Security” and please read the information under “Secure Boot.” If it says: “Secure Boot is enabled, and all required certificate updates have been applied.”

Foundry