Secure boot is on but your device is using an older boot trust configuration that should be updated

This guide shows essential steps to follow for the Secure boot is on, but your device is using an older boot trust configuration message.

Some Windows PCs may require manual firmware updates as Secure Boot certificates expire

Microsoft's original Windows Secure Boot certificates issued in 2011 expire in June 2026. Here's what that means for your PC and what you can do if you're not eligible for the update.