Loading article…
Microsoft rolls out optional June 2026 updates for Windows 11, adding new Secure Boot certificates and warning of intentional extra reboots.
Microsoft issued an optional June 2026 security update (KB5087544) that adds new Secure Boot certificates to Windows 11 PCs and may trigger an extra reboot during installation [2]. The update is aimed at preventing disruption when the 2011 Secure Boot certificates expire on June 24, a deadline that could affect older devices and those on extended‑security‑updates (ESU) plans [1].
| At a glance | |
|---|---|
| Update name | KB5087544 (optional June 2026 security update) |
| Secure Boot certificate expiry | June 24 2026 |
| Affected devices | Windows 10 ESU PCs, most Windows 11 PCs (except models < 2 years old) |
| Expected reboot behavior | One additional restart (some users see two‑to‑three) |
The core change is the replacement of the 2011 Secure Boot certificates with a 2023 version that Windows Security can report dynamically [1]. Microsoft warns that PCs without the new certificates will lose the ability to receive future boot‑level security updates, though they will still boot normally after the expiry date [3]. Because the update relies on firmware support, many OEMs (e.g., Dell, HP, Lenovo) have already stopped providing BIOS updates for legacy models, meaning those devices may never receive the new certificates automatically [3].
Microsoft confirmed that the extra reboot is intentional: the Secure Boot certificate update requires a one‑time restart to apply, and a limited number of devices may experience a second or third reboot [2]. The company also notes that a small subset of PCs could prompt for a BitLocker recovery key after the update, but the key is needed only once [1]. Users are advised to locate their recovery key beforehand to avoid being locked out.
The update is optional for most Windows 11 users; devices sold within the last two years already include the newer certificates and do not need to act [1]. For Windows 10 PCs enrolled in ESU, the update is critical because only those devices are eligible for the new certificates [1]. Older hardware that runs in Legacy BIOS or CSM mode does not use Secure Boot, so the certificate change is irrelevant for those machines [3].
The June update underscores Microsoft’s shift toward proactive certificate management to preserve boot‑level security, while highlighting a gap for older hardware that may remain unprotected as the Secure Boot ecosystem evolves.
Coverage is mostly measured — 26 of 26 reports stay neutral.
Every Monday — the token unlocks, Fed dates & catalysts set to move crypto and markets this week. So you’re never blindsided.
Free · 3-min read · one-click unsubscribe
AI-assisted synthesis by the TrendWatcher Editorial Desk · sourced from 3 outlets · Jun 24, 2026 · How we report
Microsoft has been approved to build up to 15 additional data centers in the region over the next decade, in addition to the two already planned or under construction.
The facility has made Microsoft the largest taxpayer in Mount Pleasant and Racine County, with an annual tax bill of $19.75 million and plans for hundreds of highly skilled jobs.
Construction of the second data center is currently underway, with completion scheduled for 2028.
Microsoft states the facility is designed to power the next generation of artificial intelligence innovation globally.