Secure Boot
The latest Secure Boot coverage — news, analysis, and updates from the WindowsNews.AI desk.
Windows 11 Upgrade Fails? Use This Preflight TPM & Secure Boot Checklist
The Windows 11 Installation Assistant remains the quickest path for upgrading an existing Windows 10 PC to Windows 11. Run the tool, click a few buttons, and it handles the heavy lifting—except...
Intune becomes mandatory for Windows Update for Business policies in June 2026
Microsoft has issued its May 2026 Windows servicing recap, delivering a clear heads-up to IT administrators: June will be dominated by three major shifts. A mandatory Secure Boot certificate rollover...
Microsoft's May 2026 preview update delivers AI features and a hidden boot-partition warning
On May 26, Microsoft released KB5089573, an optional non-security preview update for Windows 11 versions 24H2 and 25H2. The update moved supported PCs to builds 26200.8524 and 26100.8524...
Windows 11 KB5089570 preview: Shared Audio, Xbox mode, and the Secure Boot shakeup you need to understand
Microsoft released a new preview cumulative update for Windows 11 on May 26, 2026, delivering a mix of consumer-friendly features, structural changes to security components, and specialized AI...
Secure Boot Certificate Upgrade: 2011 Keys Expire 2026—Act Now
Every Windows PC that relies on Secure Boot faces a hard deadline in the summer of 2026. On July 1, 2026, the root certificate that has authenticated the Windows boot process since the days of...
Windows 11 Update KB5089549 Fails with 0x800f0922 Due to Low EFI Partition Space
Microsoft has confirmed that the Windows 11 security update KB5089549, released for versions 24H2 and 25H2, fails during installation on devices with critically low space on the EFI System Partition...
KB5089549 for Windows 11 Adds SecureBoot Folder to Automate UEFI Key Migration
Microsoft’s May 12, 2026 cumulative update for Windows 11, KB5089549, delivers a new and highly specific addition to the operating system: a C:\Windows\SecureBoot folder packed with PowerShell...
June 2026 Secure Boot Certificate Deadline: What Windows Admins Must Do Now to Avoid Boot Failures
Microsoft’s 2011 Secure Boot certificates expire in June 2026. If your organization hasn’t installed specific Windows updates that add the new certificates, Secure Boot‑enabled devices will...
KB5089549 Fixes BitLocker Recovery Bug, But Triggers EFI Space Warning for Windows 11
Microsoft's May 12, 2026 security update KB5089549 resolves a disruptive BitLocker recovery issue that began after April's boot-file modifications, but the fix now comes with a caution: devices with...
KB5087544 Update Brings Secure Boot Status to Windows Security App Ahead of 2026 Certificate Expiry
Microsoft's May 12, 2026 Windows 10 extended security update (ESU) KB5087544 introduces a critical new visibility feature: the Windows Security app now displays the current Secure Boot status, giving...
KB5087544 for Windows 10: RDP Fix, Secure Boot, BitLocker Updates
Microsoft rolled out the May 2026 Patch Tuesday update KB5087544 on May 12, 2026, for Windows 10 Enterprise LTSC 2021, Windows 10 IoT Enterprise LTSC 2021, and systems enrolled in the Extended...
Secure Boot 2026: OEM dbDefault vs Microsoft UEFI cert migration guide
Microsoft's May 18 Secure Boot AMA was aimed squarely at IT administrators preparing for the June 2026 expiration of older Windows Secure Boot certificates, and one enterprise question now captures...