Windows 11’s secure boot fix update finally rolls out to more PCs

Microsoft has recently begun replacing expiring Secure Boot certificates on eligible Windows 11 systems running 24H2 and 25H2 ...
Windows Latest

Windows 11 gets Secure Boot Allowed Key Exchange Key (KEK) update on more PCs, requires a reboot to install

Microsoft is rolling out "Secure Boot Allowed Key Exchange Key (KEK) Update," which requires a system reboot to finish ...
TweakTown

Microsoft is refreshing Secure Boot certificates, so you might need to update Windows

TL;DR: Secure Boot certificates in Windows 10 and 11 will expire by June 2026, risking system security and compatibility. Microsoft is issuing new certificates through updates and OEM firmware ...
Ars Technica

Stuck on Windows 11 23H2 because Windows Update won't offer me anything newer, not sure how to proceed.

I tried to deal with this over the summer and got stuck, recently realized 23H2 got EOLed late last year so trying to figure this out again. I'm trying to figure out if it's safe for me to just ...
CNET

Windows Secure Boot Certificates From 2011 Will Be Expiring Soon. What You Need to Know

In June 2025, Microsoft announced that, in June 2026, it would begin deprecating Secure Boot certificates of Windows systems from 2011, which were superseded by their 2023 counterparts.