Secure Boot Certificates to Expire June 24: Windows and Linux Users Must Update Cryptographic Keys
By
Dan Goodin, Ars Technica
Summary
Windows and Linux users face a critical June 24 deadline when three Microsoft-signed certificates used for Secure Boot will expire. These certificates are essential for verifying the cryptographic integrity of firmware and software during system boot, protecting against UEFI-based malware infections that load before operating system protections. The expiration means systems may fail to boot properly or become vulnerable to firmware attacks if updates are not applied in time.
Source
bskySecure Boot Certificates to Expire June 24: Windows and Linux Users Must Update Cryptographic Keyswired.comKey quotes
· 3 pulledThe clock is ticking for Windows and Linux users to update cryptographic keys that protect their systems against firmware-based UEFI infections, a pernicious form of malware that loads before operating system and antimalware protections start.
Beginning June 24, three certificates that cryptographically verify that each piece of firmware and software that loads during system boot will expire.
The Microsoft-signed certificates are the linchpins of Secure Boot, a Microsoft-designed chain of trust.
You might also wanna read
Impending Expiration of Microsoft's Key for Linux Secure Boot Raises Concerns
Linux users with Secure Boot enabled may face issues as Microsoft's key used for signing the UEFI bootloader is set to expire in September.
lwn.net·11mo agoImpending Issue for Linux Users with Secure Boot: Microsoft Key Expiration
Linux users with Secure Boot enabled may face issues as the key from Microsoft used to sign the UEFI bootloader is set to expire in Septembe
lwn.net·11mo ago
Understanding Secure Boot Certificate Rollover and Its Impact on Linux Users
The article discusses the implications of Secure Boot certificate rollover, particularly focusing on the claim that Linux users rely on a Mi
Technical Analysis: Circumventing UEFI Secure Boot Through Signed Bootloader Exploitation
The article discusses UEFI Secure Boot technology and methods to circumvent it by exploiting signed bootloaders. It explains that Secure Boo
habr.com·4mo ago
Microsoft Confirms Windows 11 Security Update Causing Boot Failures on Some PCs
Microsoft has confirmed that the January 2026 Windows security update (released January 13) is causing boot failures on some PCs, with devic
windowscentral.com·4mo ago
Let's Encrypt to Reduce SSL Certificate Validity from 90 to 45 Days by 2028
Let's Encrypt will reduce SSL/TLS certificate validity periods from 90 days to 45 days by 2028, following industry-wide requirements from th