Windows 11 is refreshing Secure Boot keys in 2026. Here's why TPM-WMI Event ID 1801 appears, and how to verify the new certificate.
Do you see Event ID 1796 in your Windows 11/10/Server logs? If the Secure update process cannot complete and fails with an error message— The Secure Boot update ...
Refreshing new certificates represents one of the largest coordinated security maintenance efforts across the Windows ecosystem,' Microsoft explains.
Microsoft has announced it will deliver new Secure Boot certificates via Windows Update starting March 2026 before 2011 ...
Microsoft is preparing to roll out new Secure Boot certificates via Windows Update to keep old PCs protected from boot‑level ...
One of those was UEFI Secure Boot, a mechanism for verifying PC bootloaders to ensure that unverified software can’t be loaded at startup. Secure Boot was enabled but technically optional for Windows ...
Microsoft reminds everyone that the initial wave of Secure Boot certificates, dropped in 2011, are due to expire.
Microsoft warns Secure Boot certificates will expire June 2026, updating PCs automatically to maintain boot-level security.