Support for Windows 10 ended officially in October 2025, and while over 60% of PC users have made the switch to Windows 11, 35% are still using the older OS. Look, I get that it’s tricky to break an old habit, but for those users, this has become a significant security concern.
In a new blog post, Microsoft has announced a “generational refresh” of Secure Boot certificates, which means the current ones are set to expire in late June.
If you’re on Windows 10 without these certificates, you could miss out on future security updates, and, as Microsoft says, you will risk a “degraded security state.”
What is Secure Boot?
Secure Boot is an authorization process that only allows the PC to run trusted software on startup, which stops malicious hacks during the boot.
These certificates have been around for 15 years — since 2011 with Windows 8, so it makes sense that they’re renewed to an updated standard.
How could this affect your system?
If you’re on Windows 11, you’ll just receive the updated certificates with “no additional action required.” On top of that, chances are some of you reading this may already have them, as Microsoft has been working with PC manufacturers and “provisioning updated certificates” on desktops and laptops sold in 2024 and 2025.
However, if you’re on “Windows 10 and older”, you won’t be protected from new boot-level vulnerabilities, which will put your computer at risk from the second you hit the power button.
What do you need to do?
Well, you’ve got two options here. The first obvious one that Microsoft is really wanting you to do is upgrade to Windows 11.
- You can either pick up a new system, and we’re always busy testing the best laptops, best gaming laptops and best desktops to help you make the right choice.
- Or if you’re keen to stick with your older Windows 10 system, there are ways to bypass Microsoft’s restrictions and install Windows 11. We’ve got a guide on how to do that.
If neither of these are not to your liking — maybe you have a severe allergy to Windows 11, and you want to wait for when Microsoft pulls back on stuffing it with AI. Well, there is the Extended Security Updates (ESU) program.
Follow our guide and you can expect to get these new certificates, since this program is set to run for a year starting from its launch in October.
Though it’s fair to say that by this point, going this route is kind of like kicking the can down the road. We’ll be back in this situation once October 13, 2026 rolls around.
Follow Tom's Guide on Google News and add us as a preferred source to get our up-to-date news, analysis, and reviews in your feeds.
More from Tom's Guide
- 'We need to improve Windows in ways that are meaningful for people': Microsoft is urgently trying to fix Windows 11 issues
- Forget the taskbar — 5 hidden gems that finally convinced me to love Windows 11
- Sleuth uncovers Office 97 Easter egg hidden for 30 years: 'the comments Clippy provides are a cherry on top'
