Windows 10 KB5078885 ESU out with Secure Boot 2023, replacing expiring Secure Boot certificates from 2011. But it's a staged roll out.
Microsoft confirms systems without updated Secure Boot certificates will boot normally but lose some security protections.
In June 2025, Microsoft announced that, in June 2026, it would begin deprecating Secure Boot certificates of Windows systems from 2011, which were superseded by their 2023 counterparts.
Secure Boot protects your PC against bootkit malware. The Windows update refreshes expiring Secure Boot certificates. To install, head to Settings and select Windows Update. I typically advise Windows ...
Microsoft released KB5028311 Dynamic Update packages for feature updates in Windows 10 versions 20H2, 21H2, and 22H2. These dynamic updates are meant to improve the Windows 10 setup process and more.
Microsoft has released the Windows 10 KB5078885 extended security update to fix the March 2026 Patch Tuesday vulnerabilities, ...
Microsoft is rolling out "Secure Boot Allowed Key Exchange Key (KEK) Update," which requires a system reboot to finish ...
Why it matters: Microsoft has issued guidance for fixing a serious Secure Boot vulnerability that affects all Windows systems and is actively being exploited in the wild. Normally, this kind of issue ...