The expiration of Secure Boot certificates in June 2026 poses a significant security risk for many Windows users, especially those on older hardware. Users running Windows 10 and Windows 11 face different challenges as they navigate this impending deadline.
Key facts:
- Secure Boot certificates are set to expire in June 2026.
- Windows 10 support officially ended in October 2025, but an Extended Security Update program is available until October 14, 2026.
- Approximately 400 million Windows 10 PCs are locked out of Windows 11 due to hardware requirements.
Windows 11 users on modern hardware should be fine regarding Secure Boot certificate updates. However, the situation is more precarious for those on older systems. The root cause of this concern lies in the reliance on Secure Boot as a fundamental security feature for Windows over the past 15 years.
Meanwhile, Rufus version 4.14 has introduced complications. The latest update no longer remembers certain Windows User Experience settings between sessions. Additionally, it has a broken silent installation option that affects its ability to bypass hardware requirements like TPM 2.0 and Secure Boot.
Pete Batard, the app author, quickly identified the issue with Rufus. He stated that leaving the bypass options enabled has no negative impact on the final installation on systems with TPM. This means users can still proceed with installations despite the restrictions imposed by Secure Boot.
The community remains concerned about the implications of these updates. Users are aware that their PCs may not die but could become significantly less secure as the expiration date approaches.