Final Windows Secure Boot certificate deadline hits October 19
Microsoft's Windows Production PCA 2011 certificate, which signs the Windows boot loader, expires on October 19, 2026. PCs will still boot and receive standard updates but lose new early-boot security protections and Secure Boot database updates. The 2023 replacement certificates arrive via Windows Update.
- Windows Production PCA 2011 certificate expires October 19, 2026
- Without new certificates PCs miss fixes for boot-chain flaws like BlackLotus
- Certificate status appears in Windows Security > Device security > Secure Boot
- Windows 10 gets the certificates only with ESU
Read next
Security