According to the July 2026 update notes, Microsoft says the rollout is still ongoing and will be for a while longer:Windows Secure Boot certificate expiration Secure Boot certificates used by most Windows devices were set to expire starting in June 2026. Devices that haven’t received the newer certificates will continue to start, and standard Windows updates will continue to install. In short, Windows 10 and 11 PCs that haven’t gotten their updated Secure Boot certificates will still boot, still get Windows updates, and eventually get their Secure Boot certificates over the next few months. Why all the fuss about Secure Boot if everything’s still working per usual? Well, Secure Boot is an important security feature that protects your PC from malware attacks that can take hold during system startup.