Windows 10 KB5078885 ESU out with Secure Boot 2023, replacing expiring Secure Boot certificates from 2011. But it's a staged roll out.

近期，微软在处理Windows 10和Windows 11的安全启动（Secure Boot）更新时，经历了一场引人关注的波折。早在2024年初，微软就已预告，现有的安全启动密钥将于2026年正式到期，因其已使用近15年。为了确保用户能平稳过渡，微软在今年2月发布的补丁中，通过更新KB5077181推送了新的安全证书，并建议用户在2026年6月前完成安装。

In June 2025, Microsoft announced that, in June 2026, it would begin deprecating Secure Boot certificates of Windows systems from 2011, which were superseded by their 2023 counterparts.

Make sure you've updated before the deadline.

TL;DR: Secure Boot certificates in Windows 10 and 11 will expire by June 2026, risking system security and compatibility. Microsoft is issuing new certificates through updates and OEM firmware ...

In this post, we are going to see what you can do to resolve Event ID 1801, Secure Boot CA/keys need to be updated. Event ID 1801 is a warning logged by Windows to indicate that the Secure Boot ...

Microsoft is rolling out "Secure Boot Allowed Key Exchange Key (KEK) Update," which requires a system reboot to finish ...

This article describes how to enable Secure Boot to install Windows 11. How Do I Enable Secure Boot? The easiest way to enable Secure Boot is to do so through UEFI. It's typically listed as one of the ...

Microsoft has released the Windows 10 KB5078885 extended security update to fix the March 2026 Patch Tuesday vulnerabilities, ...