Tag

Certificates

All articles tagged with #certificates

Countdown to Secure Boot: What If You Miss the June 2026 Certificate Update on Windows 11
technology1 day ago

Countdown to Secure Boot: What If You Miss the June 2026 Certificate Update on Windows 11

Microsoft explains that the original Secure Boot certificates (2011) expire in June 2026 and will be replaced by 2023 certificates through a phased CFR/LCU rollout. Legacy BIOS devices won’t be updated, and Secure Boot must be enabled; the process may involve several reboots and resealing BitLocker keys. If you ignore the deadline, Windows will boot but security will be degraded because boot-critical updates and DBX revocation lists won’t be applied, potentially blocking future OS upgrades that rely on the 2023 chain. Enterprises should test deployments, monitor Secure Boot status in Windows Security, and plan PXE/boot-manager changes accordingly. Servers require manual intervention, and the 2023 certs are projected to last until 2038 with further shifts toward post-quantum certificates later on.

Legacy Secure Boot certificates set to expire, risking future boot security updates
technology2 days ago

Legacy Secure Boot certificates set to expire, risking future boot security updates

Microsoft’s 2011-era Secure Boot certificates expire in 2026 (June 24 for KEK CA 2011, June 27 for UEFI CA 2011, October 19 for Windows Production PCA 2011). After June 24, devices will still boot but won’t receive new boot-level security updates or patches for boot vulnerabilities unless they’re on updated builds via the 2023 certificate rollout (KB5089549). Some older hardware may require OEM firmware updates to align with the new chain. Check KB5062710 for status and ensure the latest Windows updates are installed; Windows 10 users outside the Extended Security Updates program may have limited remediation paths.”,

Microsoft Defender flags DigiCert root certificates as malware, triggering trust disruptions
security22 days ago

Microsoft Defender flags DigiCert root certificates as malware, triggering trust disruptions

Microsoft Defender's late-April signature update falsely flagged DigiCert root certificates as malware, causing removals from the Windows trust store and disruptions to secure connections; Microsoft issued emergency Defender definitions (1.449.430.0 and 1.449.431.0) to fix the issue and auto-restore certificates. While timing touches a DigiCert breach incident, Defender targeted root certificates, not EV signing certs, underscoring the risk of false positives in automated threat detection and the need for layered security.

Preparing Windows for the June 2026 Secure Boot Certificate Update
technology23 days ago

Preparing Windows for the June 2026 Secure Boot Certificate Update

Secure Boot certificates expire in June 2026. Check if your PC already has updated certificates with a PowerShell check, then install any pending Windows updates and OEM firmware updates. If firmware updates aren’t available, use Microsoft’s registry-based workaround and reboot as directed. Windows 10 users may need Extended Security Updates to receive the update.

Windows 11 auto-replaces expiring Secure Boot certificates to preserve boot integrity
security4 months ago

Windows 11 auto-replaces expiring Secure Boot certificates to preserve boot integrity

Microsoft is automatically updating expiring Secure Boot certificates on eligible Windows 11 24H2/25H2 devices via quality updates, with a phased rollout to high-confidence machines; admins can also deploy certificates manually via registry, WinCS, or Group Policy. To avoid boot issues, devices must receive the updates before the June 2026 expiry, or risk losing Windows Boot Manager and Secure Boot protections; administrators should inventory devices, verify Secure Boot status, update firmware, then apply the certificate updates.

"Philosophy Departments Offer Ethics Certificates to Non-Majors"
education3 years ago

"Philosophy Departments Offer Ethics Certificates to Non-Majors"

Philosophy departments in universities across the US are offering ethics certificates to nonmajors in an effort to increase enrollment and raise the profile of philosophy on campus. The certificates require a few courses in ethics and society and will be listed on earners' transcripts. The move comes as philosophy majors have seen a decline in enrollment in recent years, prompting departments to revamp their offerings and focus more on issue-centered courses. The American Philosophical Association encourages departments to consider changing the names of courses to attract a wider audience and to offer courses on timely topics in culture and society.