ExplainingComputers

Secure Boot Certificate Expiry (Windows & Linux)

Secure Boot certificates on most computers expire in June and October 2026, affecting Windows 11, Windows 10 and Linux systems with secure boot activated. This video explains what is happening, the implications, and what you may potentially need to do. But do not panic! Most systems should update automatically, and even if they don’t, should continue to boot. REFERENCES: Microsoft Secure Boot certificate expiry page: https://support.microsoft.com/en-gb/topic/windows-secure-boot-certificate-expiration-and-ca-updates-7ff40d33-95dc-4c3c-8725-a9b95457578e Microsoft Windows Secuirty app Secure Boot update status: https://support.microsoft.com/en-us/topic/secure-boot-certificate-update-status-in-the-windows-security-app-5ce39986-7dd2-4852-8c21-ef30dd04f046 LINUX COMMANDS Please note that all commands are entered at your own risk. Check secure boot status: sudo mokutil --sb-state Check status of secure boot authorized signature database (DB) and key enrollment key database (KEK): sudo mokutil --db sudo mokutil --kek Firmware Update daemon commands: Refresh metadata: sudo fwupdmgr refresh Check available updates: sudo fwupdmgr get-updates Get updates: sudo fwupdmgr update More videos on computing and related topics can be found at: http://www.youtube.com/@ExplainingComputers And more videos on film and other making, plus retro tech, can be found on my Christopher Barnatt channel: http://www.youtube.com/@ChristopherBarnatt Chapters: 00:00 Titles & Intro 00:51 Secure Boot & Certificates 05:02 Windows Updates 12:44 Firmware (UEFI/BIOS) Update 16:12 Linux Updates 20:33 Wrap #SecureBoot #certificate #UEFI #signature #Windows #Windows10 #Windows11 #Linux #update #ExplainingComputers