Uploaded May 2026 | Updated September 2026, 2 weeks ago
Secure Boot certificates on most computers expire in June and October 2026, affecting Windows 11, Windows 10 and Linux systems with secure boot activated. This video explains what is happening, the implications, and what you may potentially need to do. But do not panic! Most systems should update automatically, and even if they don’t, should continue to boot.
REFERENCES:
Microsoft Secure Boot certificate expiry page:
support.microsoft.com/en-gb/topic/windows-secure-boot-certificate-expiration-and-ca-updates-7ff40d33-95dc-4c3c-8725-a9b95457578e
Microsoft Windows Secuirty app Secure Boot update status:
support.microsoft.com/en-us/topic/secure-boot-certificate-update-status-in-the-windows-security-app-5ce39986-7dd2-4852-8c21-ef30dd04f046
LINUX COMMANDS
Please note that all commands are entered at your own risk.
Check secure boot status:
sudo mokutil --sb-state
Check status of secure boot authorized signature database (DB) and key
enrollment key database (KEK):
sudo mokutil --db
sudo mokutil --kek
Firmware Update daemon commands:
Refresh metadata:
sudo fwupdmgr refresh
Check available updates:
sudo fwupdmgr get-updates
Get updates:
sudo fwupdmgr update
More videos on computing and related topics can be found at:
youtube.com/@ExplainingComputers
And more videos on film and other making, plus retro tech, can be found on my Christopher Barnatt channel: youtube.com/@ChristopherBarnatt
Chapters:
00:00 Titles & Intro
00:51 Secure Boot & Certificates
05:02 Windows Updates
12:44 Firmware (UEFI/BIOS) Update
16:12 Linux Updates
20:33 Wrap
#SecureBoot #certificate #UEFI #signature #Windows #Windows10 #Windows11 #Linux #update #ExplainingComputers
Secure Boot certificates on most computers expire in June and October 2026, affecting Windows 11, Windows 10 and Linux systems with secure boot activated. This video explains what is happening, the implications, and what you may potentially need to do. But do not panic! Most systems should update automatically, and even if they don’t, should continue to boot.
REFERENCES:
Microsoft Secure Boot certificate expiry page:
support.microsoft.com/en-gb/topic/windows-secure-boot-certificate-expiration-and-ca-updates-7ff40d33-95dc-4c3c-8725-a9b95457578e
Microsoft Windows Secuirty app Secure Boot update status:
support.microsoft.com/en-us/topic/secure-boot-certificate-update-status-in-the-windows-security-app-5ce39986-7dd2-4852-8c21-ef30dd04f046
LINUX COMMANDS
Please note that all commands are entered at your own risk.
Check secure boot status:
sudo mokutil --sb-state
Check status of secure boot authorized signature database (DB) and key
enrollment key database (KEK):
sudo mokutil --db
sudo mokutil --kek
Firmware Update daemon commands:
Refresh metadata:
sudo fwupdmgr refresh
Check available updates:
sudo fwupdmgr get-updates
Get updates:
sudo fwupdmgr update
More videos on computing and related topics can be found at:
youtube.com/@ExplainingComputers
And more videos on film and other making, plus retro tech, can be found on my Christopher Barnatt channel: youtube.com/@ChristopherBarnatt
Chapters:
00:00 Titles & Intro
00:51 Secure Boot & Certificates
05:02 Windows Updates
12:44 Firmware (UEFI/BIOS) Update
16:12 Linux Updates
20:33 Wrap
#SecureBoot #certificate #UEFI #signature #Windows #Windows10 #Windows11 #Linux #update #ExplainingComputers
