Secure Boot
The latest Secure Boot coverage — news, analysis, and updates from the WindowsNews.AI desk.
June 2026 Secure Boot Certificate Deadline: What Windows Admins Must Do Now to Avoid Boot Failures
Microsoft’s 2011 Secure Boot certificates expire in June 2026. If your organization hasn’t installed specific Windows updates that add the new certificates, Secure Boot‑enabled devices will...
KB5089549 Fixes BitLocker Recovery Bug, But Triggers EFI Space Warning for Windows 11
Microsoft's May 12, 2026 security update KB5089549 resolves a disruptive BitLocker recovery issue that began after April's boot-file modifications, but the fix now comes with a caution: devices with...
KB5087544 Update Brings Secure Boot Status to Windows Security App Ahead of 2026 Certificate Expiry
Microsoft's May 12, 2026 Windows 10 extended security update (ESU) KB5087544 introduces a critical new visibility feature: the Windows Security app now displays the current Secure Boot status, giving...
KB5087544 for Windows 10: RDP Fix, Secure Boot, BitLocker Updates
Microsoft rolled out the May 2026 Patch Tuesday update KB5087544 on May 12, 2026, for Windows 10 Enterprise LTSC 2021, Windows 10 IoT Enterprise LTSC 2021, and systems enrolled in the Extended...
Secure Boot 2026: OEM dbDefault vs Microsoft UEFI cert migration guide
Microsoft's May 18 Secure Boot AMA was aimed squarely at IT administrators preparing for the June 2026 expiration of older Windows Secure Boot certificates, and one enterprise question now captures...
KB5089549 and KB5087420 push Windows 11 25H2/24H2 to builds 26200.8457/26100.8457.
Microsoft has released its May 2026 Patch Tuesday updates, KB5089549 and KB5087420, for all supported Windows 11 versions. These cumulative updates deliver crucial security fixes for Secure Boot and...
Windows 10 KB5087544 tightens ESU licensing, adds Secure Boot tile, enforces BitLocker checks
Microsoft pushed KB5087544 to Windows 10 22H2 Extended Security Update (ESU) systems on May 12, 2026, bringing the May Patch Tuesday cumulative update. The package raises OS builds to 19045.7291 and...
Patch Windows now for CVE-2026-41097 Secure Boot bypass, verify trust chain
Microsoft’s May 2026 Patch Tuesday delivered a jolt to Windows administrators with the disclosure of CVE-2026-41097, an Important-rated Secure Boot security feature bypass. The vulnerability,...
KB5087594 Safe OS Update Prevents Windows 11 Secure Boot Failure by June 2026
Microsoft published KB5087594 on May 12, 2026, as a Safe OS Dynamic Update exclusively for Windows 11 version 23H2. This release is not just another routine patch—it is a direct response to the...
KB5089593 Prepares Windows 11 Recovery for June 2026 Secure Boot Expiry
Microsoft released KB5089593 on May 12, 2026, a Safe OS Dynamic Update for Windows 11 versions 24H2 and 25H2. The patch overhauls the Windows Recovery Environment (WinRE) and delivers yet another...
KB5089549 readies Windows 11 24H2/25H2 for Secure Boot certificate expiry
Microsoft shipped KB5089549 on May 12, 2026, as part of its monthly Patch Tuesday rollout, delivering cumulative security and quality improvements to Windows 11 versions 24H2 and 25H2. The update...
KB5089549: Microsoft’s Stealthy May Patch Preps Your PC for a Looming Secure Boot Deadline
Microsoft shipped the May 2026 security update for Windows 11 on schedule, but buried inside the routine cumulative patch is a quiet, deadline-driven campaign to keep millions of PCs from losing...