Microsoft is rolling out new Secure Boot certificates through Windows updates to replace the original ones expiring in June 2026. This update enhances security by ensuring that only trusted software can load during startup. Devices on unsupported Windows versions won’t receive these updates and will enter a "degraded security state."