Windows Secure Boot Certificates Are Expiring: What You Need to Know Before June 2026
For millions of PC users, a critical security deadline is approaching. Microsoft has issued warnings regarding the expiration of original Secure Boot certificates in June 2026. These certificates are vital for system integrity, as they prevent Windows machines from running insecure or malicious software during the boot process.
This deadline arrives shortly after the official end of support for Windows 10, leaving users who haven’t upgraded to Windows 11 in a precarious position. To maintain a secure environment, users must take immediate action to either upgrade their hardware or enroll in specific support programs.
Understanding the Secure Boot Certificate Crisis
Secure Boot is a security standard that ensures a device boots using only software that is trusted by the Original Equipment Manufacturer (OEM). When the original Secure Boot certificates expire in June 2026, devices relying on them may face increased risks of running insecure software.
To mitigate this risk, Microsoft requires users to either migrate to Windows 11 or utilize the Extended Security Updates (ESU) program to ensure their systems remain patched and protected.
The State of Windows 10 Support
Microsoft officially ended support for Windows 10 on October 14, 2025. This means that devices running Windows 10 no longer receive feature updates, technical support, or regular security updates from Microsoft. While these computers continue to operate, the lack of updates significantly increases vulnerability to viruses and malware.
For those not using Microsoft Defender for Endpoint, Microsoft will continue providing security intelligence updates for the built-in Microsoft Defender Antivirus through October 2028. However, antivirus software alone is not a comprehensive risk mitigation strategy without full detection and response capabilities.
The Extended Security Updates (ESU) Lifeline
For users who cannot immediately upgrade to Windows 11—due to hardware incompatibility or organizational constraints—Microsoft offers the Extended Security Updates (ESU) program. This program acts as a temporary bridge, providing critical and essential security updates to keep devices secure during migration.
ESU Key Details:
- Duration: Coverage is provided through October 13, 2026.
- Scope: Includes critical security updates; it does not include new features, bug fixes, or technical support.
- Requirement: Devices must be running Windows 10 version 22H2.
How to Enroll in the ESU Program
Users with administrative privileges on a Windows 10 22H2 device can enroll via the Windows Update section in Settings. There are three primary ways to obtain these updates:
- Paid Enrollment: A fee of $30 for one year of critical updates (note: this is free for users in Europe).
- Microsoft Rewards: Redeem 1,000 Microsoft Rewards points to cover the cost.
- OneDrive Integration: Sync your Windows Backup to a Microsoft OneDrive account. While the enrollment is free, users may need to purchase additional OneDrive storage if they exceed the free 5GB limit.
The Definitive Solution: Upgrading to Windows 11
While the ESU program provides a short-term fix, Microsoft strongly recommends upgrading to Windows 11 for all eligible PCs. Windows 11 offers the latest security features, improved performance and ongoing support at no additional cost.
Upgrading is the only way to ensure endpoints remain fully compliant and protected beyond the 2026 deadlines. For users with aging hardware that does not meet Windows 11 requirements, the ESU program is the necessary temporary alternative to avoid the risks associated with the June 2026 certificate expiration.
Key Takeaways for Windows Users
| Deadline | Event | Required Action |
|---|---|---|
| October 14, 2025 | Windows 10 End of Support | Upgrade to Windows 11 or enroll in ESU. |
| June 2026 | Secure Boot Certificate Expiration | Ensure system is updated via Windows 11 or ESU. |
| October 13, 2026 | ESU Program Ends | Complete migration to a supported platform. |
| October 2028 | Defender Antivirus SIU Ends | Final cutoff for built-in antivirus intelligence. |
Frequently Asked Questions
Will my Windows 10 PC stop working in June 2026?
No, your device will continue to operate. However, the expiration of Secure Boot certificates and the lack of official support make the device significantly more vulnerable to cyber threats.
Is the ESU program a long-term solution?
No. Microsoft has stated that the ESU program is intended as a temporary bridge to allow users time to migrate to a newer, supported platform.
How do I check if I am eligible for ESU?
Go to Settings > Windows Update > View Update History to confirm you are running version 22H2. You must too have administrative privileges on the device.
Keep reading