Modern PCs support the Windows Secure Boot feature through their UEFI firmware. This ensures that the computer blocks malware, such as rootkits, even before the operating system boots. The secure boot feature uses keys, certificates, and signature databases to ensure the integrity of boot components.
The certificates used to date date back to 2011 and were due to expire in June 2026. The new certificates have been rolling out since 2023 and the update is applied automatically via a firmware update or via Windows Update. You can check if the update was successful using the Windows Security application.
