Applies To
Windows 10 Windows 10, version 1607, all editions Win 10 Ent LTSC 2019 Win 10 IoT Ent LTSC 2019 Windows 10 IoT Core LTSC Windows 10 Enterprise LTSC 2021 Windows 10 IoT Enterprise LTSC 2021 Windows 10, version 22H2, all editions Windows 11 Home and Pro, version 21H2 Windows 11 Enterprise Multi-Session, version 21H2 Windows 11 Enterprise and Education, version 21H2 Windows 11 IoT Enterprise, version 21H2 Windows 11 Home and Pro, version 22H2 Windows 11 Enterprise Multi-Session, version 22H2 Windows 11 Enterprise and Education, version 22H2 Windows 11 IoT Enterprise, version 22H2 Windows 11 SE, version 23H2 Windows 11 Home and Pro, version 23H2 Windows 11 Enterprise and Education, version 23H2 Windows 11 Enterprise Multi-Session, version 23H2 Windows 11 SE, version 24H2 Windows 11 Enterprise and Education, version 24H2 Windows 11 Enterprise Multi-Session, version 24H2 Windows 11 Home and Pro, version 24H2 Windows 11 IoT Enterprise, version 24H2 Windows Server 2012 ESU Windows Server 2012 R2 ESU Windows Server 2016 Windows Server 2019 Windows Server 2022 Windows Server 2025

Original publish date: February 24, 2026

KB ID: 5081884

Change Date

Change Description

May 21, 2026

  • New updates have been added to the Announcement history for April 3rd thru June 4th.

April 2, 2026

  • A new update has been added to the Announcement history for April 2nd.

March 23, 2026

  • New updates have been added to the Announcement history for March 10 thru April 23rd.

February 27, 2026

  • A new update has been added to the Announcement history for February 23rd.

Overview

This page provides updates and announcements related to the deployment of new Secure Boot certificates on Windows devices. It highlights significant milestones, changes in rollout status, and important communications that may affect device readiness, management, or servicing. Updates are published as the deployment progresses and are intended to help customers, IT professionals, and partners stay informed about notable developments.

Updates and announcement history

​​​​​​​The table below lists significant announcements and updates related to the Secure Boot certificate deployments, in chronological order from newest to oldest.

Date

Announcements

June 4, 2026

Ask Microsoft Anything: Secure Boot

May 19, 2026

Updated Secure Boot status report in Windows Autopatch - Windows IT Pro Blog published.

May 18, 2026

On demand: Ask Microsoft Anything: Secure Boot

May 13, 2026

Secure Boot update from 2011 to 2023 certificates: Trusted Launch VMs (TVM) and Confidential VMs (CVM) published.

April 27, 2026

Assess Secure Boot status with Microsoft Defender published.

April 23, 2026

On demand: Ask Microsoft Anything: Secure Boot

April 3, 2026

Updated: Sample Secure Boot E2E Automation Guide

April 2, 2026

Secure Boot certificate update status in the Windows Security app published.

IT admin guide: Secure Boot certificate update status in the Windows Security app published.

March 19, 2026

Secure Boot troubleshooting guide published.

March 16, 2026

A how-to guide for customers that want to deploy to their fleet in a gradual manner. Documentation and sample PowerShell scripts are published here: Sample Secure Boot E2E Automation

March 12, 2026

On demand: Ask Microsoft Anything: Secure Boot

March 10, 2026

A Closer Look at the High Confidence Database published.

March 9, 2026

Deep dive: Secure Boot certificate updates explained

February 23, 2026

Windows Server playbook and call to action blog posts published. 

Windows Server Secure Boot playbook for certificates expiring in 2026

Prepare your servers for Secure Boot certificate updates

February 18, 2026

A how-to page for Intune users for deploying scripts and a dashboard for monitoring the status of devices managed by Intune.Monitoring Secure Boot certificate status with Microsoft Intune remediations

February 13, 2026

The Sample Secure Boot Inventory Data Collection script was updated with improved coverage and reliability.

February 10, 2026 February 9, 2026

Made significant updates to the Secure Boot DB and DBX variable update events page, including adding some new events and summary information on the device specific events.

February 10, 2026

Added guidance on When Secure Boot certificates expire on Windows devices and how they behave if the new certificates are not present.

February 10, 2026

February Cumulative Updates included additional High Confidence devices

February 5, 2026

On demand: Ask Microsoft Anything: Secure Boot - February 2026

January 13, 2026

January Cumulative Updates included first drop of High Confidence devices

December 10, 2025

On demand: Ask Microsoft Anything: Secure Boot - Dec. 2025

November 13, 2025

Secure Boot playbook for certificates expiring in 2026 published.​​​​​​​

Facebook LinkedIn Email
SUBSCRIBE RSS FEEDS

Need more help?

Want more options?

Explore subscription benefits, browse training courses, learn how to secure your device, and more.

Microsoft 365 subscription benefits

Microsoft 365 training

Microsoft security

Accessibility center