Replacement of outdated Secure Boot certificates is necessary by June 2026 to prevent systems from losing the ability to verify new bootloaders and deploy security updates.
After Secure Boot certificates expire in 2026, systems will no longer be able to verify new 2023-signed bootloaders and will not receive security updates against pre-boot attacks.
