Microsoft answers what you must do as Windows 11 Secure Boot deadline hits in days
windowslatest.com Jun 9, 2026

Microsoft answers what you must do as Windows 11 Secure Boot deadline hits in days

AI-summarised brief · reviewed before publication

Microsoft held a live "Ask Microsoft Anything" session on June 4 to address questions from IT administrators and enterprise customers regarding the upcoming Secure Boot deadline for Windows 11. The panel discussed specifics around enterprise rollouts, virtual machines, and PXE boot scenarios, as well as what IT admins should do in the next few days. Microsoft clarified that the June 24 expiration of the Microsoft Secure Boot KEK certificate is not a hard stop, but rather a deadline for signing new DBX payloads, which will continue to work after the date.

💡 Why It Matters

  • · The Secure Boot deadline's significance lies in its impact on device security, as devices that miss future revocations may become less secure over time.
  • · The Intune monitoring report and PowerShell remediation script provide a clear view of device coverage, allowing IT admins to identify and address devices that require manual intervention.