07/05/2026
Secure Boot updates should be happening automatically but in many instances they have not in Healthchecks I’ve carried out since February 26.
I have monitored and ensured they are completed as part of general security checks done at a Healthcheck.
Microsoft have made this simpler to see if the update has taken place. I advise that you check as running with Secure Boot degraded is a massive increase to your attack surface.
Healthchecks are available on an appointment basis to existing customers. New customers will have to be running a supported Windows 11 device. Windows 10 devices will not be automatically updated as support is ended.
Original publish date: June 26, 2025 KB ID: 5062710 Change Log Change Date Change Description February 3, 2026 Added a new section "The impact of Secure Boot certificate expiration". Removed the notes marked as "Important" above and below the section "Call to action". November 10, 2025 Corrected two...