Windows 11 Users: Keep Windows Update On as Microsoft Rolls Out Secure Boot Fixes
Microsoft said on July 28 that Secure Boot certificate updates are still rolling out through normal Windows Update. Most home users do not need to panic or chase strange instructions - just keep updates turned on and let Windows do the work.
Microsoft posted a new Windows 11 update note on July 28, 2026 with a useful reminder for everyday PC users: Secure Boot certificates used by many Windows devices began expiring in June 2026, and Microsoft is continuing to deliver updated certificates through normal Windows Update.
The reassuring part is that Microsoft says devices that have not yet received the newer certificates should still start normally, and standard Windows updates should continue to install. In plain language, this is not a sign that you need to pay someone, download a mystery tool, or click a link from an unsolicited message.
The simple rule
If your Windows computer is working normally, the safest move is usually the boring one: leave Windows Update turned on and let your PC receive updates from Microsoft directly.
What to do
On a Windows 11 PC, open Settings > Windows Update and check that updates are active. If you see a real Microsoft update waiting, install it. Be careful with emails, popup warnings, or phone calls claiming your computer needs an urgent certificate repair. Do not give remote access to anyone who contacts you unexpectedly. If you want help, ask a trusted family member or local technician you contact yourself.