Secure Boot certificates expiring June 24: Windows and Linux users must update keys
By
Dan Goodin
Hot, fresh, and worth queueing round the block for.
Summary
Windows and Linux users face a June 24 deadline to update Secure Boot cryptographic keys, as three Microsoft-signed certificates that verify firmware and software during system boot are set to expire. These certificates are essential for protecting systems against firmware-based UEFI infections—malware that loads before the operating system and anti-malware protections begin. The expiration affects the Secure Boot chain of trust, and users need to apply updates to ensure continued protection against boot-level threats.
Key quotes
· 3 pulledThe clock is ticking for Windows and Linux users to update cryptographic keys that protect their systems against firmware-based UEFI infections, a pernicious form of malware that loads before operating system and anti-malware protections start.
Beginning June 24, three certificates that cryptographically verify that each piece of firmware and software that loads during system boot will expire.
The Microsoft-signed certificates are the linchpins of Secure Boot.
You might also wanna read
Impending Expiration of Microsoft's Key for Linux Secure Boot Raises Concerns
Linux users with Secure Boot enabled may face issues as Microsoft's key used for signing the UEFI bootloader is set to expire in September.
lwn.net·11mo agoImpending Issue for Linux Users with Secure Boot: Microsoft Key Expiration
Linux users with Secure Boot enabled may face issues as the key from Microsoft used to sign the UEFI bootloader is set to expire in Septembe
lwn.net·11mo ago
Understanding Secure Boot Certificate Rollover and Its Impact on Linux Users
The article discusses the implications of Secure Boot certificate rollover, particularly focusing on the claim that Linux users rely on a Mi
Technical Analysis: Circumventing UEFI Secure Boot Through Signed Bootloader Exploitation
The article discusses UEFI Secure Boot technology and methods to circumvent it by exploiting signed bootloaders. It explains that Secure Boo
habr.com·4mo ago
Microsoft Confirms Windows 11 Security Update Causing Boot Failures on Some PCs
Microsoft has confirmed that the January 2026 Windows security update (released January 13) is causing boot failures on some PCs, with devic
windowscentral.com·4mo ago
Let's Encrypt Now Offers 6-Day and IP Address Certificates for Enhanced Security
Let's Encrypt has made short-lived certificates (valid for 160 hours/6 days) and IP address certificates generally available. These certific