| Board : | |
| Author : | |
| Subject : | |
| Date : | |
|
Hey everyone, just spent a few hours getting this sorted and wanted to give everyone a heads up. Microsoft has a mandatory Secure Boot certificate update due June 26th and this one is serious. Don't ignore it. Without this update your system is vulnerable to a type of malware called a bootkit. Bootkits inject themselves into your boot sector and load before Windows even starts making them completely invisible to antivirus software. They survive reboots and even full Windows reinstalls because they live below the OS level. The old Secure Boot certificates have been around long enough that hackers have had years to find exploits in them. This update replaces them with new 2023 certificates that close those vulnerabilities. Estimates put somewhere between 300 and 500 million machines worldwide at risk. What makes this one especially dangerous is that Windows Update alone does not finish the job. Microsoft pushed part of the update through Windows Update this month so most people will see it install and assume they are done. They are not. The actual certificate installation requires correct BIOS settings first and then manually triggering a scheduled update task in PowerShell followed by a full shutdown and reboot not just a restart. There is no popup warning you about this. It just silently fails in the background and you will never know you are still vulnerable. It took me a while to figure out the right combination of steps but it does work. If your PC was built in the last few years and runs Windows 11 on a modern UEFI setup the fix is straightforward. If you are on older hardware or have a more complex setup like dual booting be careful and do your research before changing any BIOS settings because the wrong change could cause boot issues. I strongly recommend reading the official Microsoft articles on this update before attempting anything. Microsoft has detailed documentation on the Secure Boot certificate update and the steps required for your specific setup. Just Google "Windows Secure Boot certificate update June 2026 Microsoft" and read the official support articles first then follow a guide for your specific motherboard. June 26th is only a couple weeks away so don't put it off. | |