Learn more about Secure Boot certificate expiration<\/a><\/div>\n<\/div>\n\n\n\nCoordinated industry effort across the server ecosystem<\/h2>\n\n\n\n Microsoft has worked closely with the server ecosystem partners to make this transition as smooth as possible:<\/p>\n\n\n\n
\nMany newer server hardware and virtual machine versions built since 2024, and almost all released in 2025 are already preconfigured with the 2023 Secure Boot certificates.<\/li>\n\n\n\n Device manufacturer and firmware partners have collaborated with Microsoft to provide supported upgrade paths for existing deployments that currently use 2011 certificates.<\/li>\n\n\n\n Microsoft<\/a>\u00a0and\u00a0 OEMs<\/a>\u00a0are working\u00a0together to provide holistic guidance and help customers plan and execute the update safely across diverse environments.<\/li>\n<\/ul>\n\n\n\nThis coordinated effort is designed to minimize operational risk while helping to preserve the high security standards expected of modern server platforms.<\/p>\n\n\n\n
Please see the Windows Blog post, \u201cRefreshing the root of trust: industry collaboration on Secure Boot certificate updates\u201d<\/a>, to understand how Microsoft collaborated with device manufacturers and firmware partners to support an efficient and safe deployment.<\/strong><\/p>\n\n\n\nBecause Windows Server instances do not receive the 2023 Secure Boot certificates through Controlled Feature Rollout (CFR)\u2014unlike Windows PCs\u2014IT administrators must take action on servers that are in scope. As part of standard maintenance, administrators should first ensure their servers are fully up to date by installing the latest cumulative updates. They must then manually initiate the Secure Boot<\/a> certificate update on Windows Server systems that have Secure Boot enabled and did not ship from the manufacturer with the 2023 Secure Boot certificates or have not otherwise been updated to include them.<\/p>\n\n\n\nWindows Server administrators call to action<\/h2>\n\n\n\n Review the available methods to update Secure Boot certificates on Windows Server and plan your environment refresh well before the June\u202f2026 expiration. Start by reviewing the official step\u2011by\u2011step guidance designed specifically for IT professionals managing server environments, which can be found here<\/a>.<\/p>\n\n\n\nMicrosoft has also hosted Secure Boot Ask Microsoft Anything (AMA) sessions in December 2025<\/a> and February 2026<\/a>, providing deep technical context and direct answers to common questions around certificate expiration and updates. If you missed these sessions, recordings are available on demand.<\/p>\n\n\n\nIf you have questions, you can join our upcoming Secure Boot AMAs in March and April and follow Windows Events<\/a> on the Microsoft Tech Community to be apprised of future events. The next event is the \u201c Secure Boot certificate updates explained – Microsoft Technical Takeoff<\/a>\u201d.<\/p>\n\n\n\nFor ongoing updates, resources, and centralized guidance, bookmark the Windows Secure Boot certificate updates page<\/a>. This page serves as your one\u2011stop resource to help understand, prepare, plan, and execute Secure Boot certificate updates on your Windows Server environment.<\/p>\n","protected":false},"excerpt":{"rendered":"The original Secure Boot certificates introduced in 2011 are approaching the end of their planned lifecycle, with expirations beginning in late June 2026.<\/p>\n","protected":false},"author":6104,"featured_media":21318,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"msxcm_post_with_no_image":false,"ep_exclude_from_search":false,"_classifai_error":"","_classifai_text_to_speech_error":"","footnotes":""},"post_tag":[],"product":[],"content-type":[964],"solution":[967],"coauthors":[3734],"class_list":["post-21317","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","content-type-updates","solution-security"],"yoast_head":"\n
Prepare your servers for Secure Boot certificate updates | Microsoft Windows Server Blog<\/title>\n \n \n \n \n \n \n \n \n \n \n \n \n \n\t \n\t \n\t \n \n \n \n \n \n \n\t \n\t \n\t \n