Secure Boot deadline: Microsoft reveals what happens to Windows 11 PCs if you missed the update
windowslatest.com Jun 21, 2026

Secure Boot deadline: Microsoft reveals what happens to Windows 11 PCs if you missed the update

AI-summarised brief · reviewed before publication

Microsoft has revealed what happens to Windows 11 PCs that miss the Secure Boot update deadline. The expiration of Secure Boot 2011 certificates does not cause PCs to stop booting, but devices without the 2023 certificates will no longer receive updates to the Windows Boot Manager, Secure Boot databases, and mitigations for newly discovered boot-level vulnerabilities. PCs on older hardware, particularly those from before 2018, may not receive the automatic update, and OEM support has a cutoff, with manufacturers like Dell and HP discontinuing BIOS support for certain models. This means some PCs will not be able to receive the certificate update, affecting their ability to receive future boot-level security updates, with the degradation being gradual, not sudden, and Microsoft confirming that standard Windows updates will continue to install.

💡 Why It Matters

  • · The inability to receive boot-level security updates exposes older PCs to potential vulnerabilities, leaving them more susceptible to attacks.
  • · Microsoft's confirmation that standard Windows updates will continue to install provides some reassurance, but the lack of boot-level security updates is a significant concern.