Windows 11 is refreshing Secure Boot keys in 2026. Here's why TPM-WMI Event ID 1801 appears, and how to verify the new certificate.

Refreshing new certificates represents one of the largest coordinated security maintenance efforts across the Windows ecosystem,' Microsoft explains.

Microsoft is preparing to roll out new Secure Boot certificates via Windows Update to keep old PCs protected from boot‑level ...

Microsoft is reminding users that the Secure Boot ecosystem will soon require a mandatory check-up. The Redmond-backed security protocol, part of the UEFI specification and primarily ...

Secure Boot helps keep your computer safe by using trusted certificates in UEFI firmware. It checks bootloaders and prevents dangerous applications from running before Windows starts. Through Secure ...

Microsoft has started automatically replacing expiring Secure Boot certificates on eligible Windows 11 24H2 and 25H2 systems. Secure Boot is a security feature that blocks malicious software (like ...

Microsoft has released the Windows 10 KB5075912 extended security update to fix February 2026 Patch Tuesday vulnerabilities, including six zero-days, and continue rolling out replacements for expiring ...

Do you see Event ID 1796 in your Windows 11/10/Server logs? If the Secure update process cannot complete and fails with an error message— The Secure Boot update ...

I always get a bit jittery whenever I hear of a new vulnerability that can enable a bypass of the Windows Secure Boot protections. I don’t really need to explain why, do I? Suffice to say, Secure Boot ...