check before: 2026-06-01
Product:
Intune, Windows, Windows 365, Windows Autopatch
Platform:
Online, Windows Desktop, World tenant
Status:
Change type:
Admin impact
Links:
Details:
New documentation is now available to help IT administrators prepare for Secure Boot certificate updates and manage update readiness across virtual and cloud-managed Windows environments. The documentation covers Secure Boot certificate updates for Azure Virtual Desktop and Windows 365 Cloud PCs, as well as monitoring Secure Boot certificate status using Microsoft Intune remediations to provide visibility into readiness across managed devices. Together, these resources help ensure virtual and cloud-managed Windows environments remain secure and continue to receive updates after June 2026.
When will this happen:
This documentation is available now. Secure Boot certificates begin expiring in June 2026.
Change Category:
XXXXXXX ... free basic plan only
Scope:
XXXXXXX ... free basic plan only
Release Phase:
Created:
2026-02-27
updated:
2026-04-17
Task Type
XXXXXXX ... free basic plan only
Docu to Check
XXXXXXX ... free basic plan only
MS How does it affect me
XXXXXXX ... free basic plan only
MS Preperations
XXXXXXX ... free basic plan only
MS Urgency
XXXXXXX ... free basic plan only
MS workload name
XXXXXXX ... free basic plan only
summary for non-techies**
XXXXXXX ... free basic plan only
Direct effects for Operations**
Secure Boot Certificate Expiration
If organizations do not prepare for the Secure Boot certificate updates, devices may fail to boot or operate securely after the certificates expire in June 2026.
- roles: IT Administrator, System Engineer
- references: https://learn.microsoft.com/windows/deployment/windows-autopatch/monitor/secure-boot-status-report, https://support.microsoft.com/topic/secure-boot-certificate-updates-guidance-for-it-professionals-and-organizations-e2b43f9f-b424-42df-bc6a-8476db65ab2f#bkmk_deploment_playbook
" target="_blank" rel="nofollow noopener noreferrer">https://support.microsoft.com/topic/secure-boot-certificate-updates-guidance-for-it-professionals-and-organizations-e2b43f9f-b424-42df-bc6a-8476db65ab2f#bkmk_deploment_playbook
Lack of Monitoring Tools
Without preparation, organizations may not effectively monitor the Secure Boot certificate status, leading to unaddressed vulnerabilities and compliance issues.
- roles: IT Administrator, Compliance Officer
- references: https://support.microsoft.com/topic/monitoring-secure-boot-certificate-status-with-microsoft-intune-remediations-6696a27b-fa09-4570-b112-124965adc87f" target="_blank" rel="nofollow noopener noreferrer">https://support.microsoft.com/topic/monitoring-secure-boot-certificate-status-with-microsoft-intune-remediations-6696a27b-fa09-4570-b112-124965adc87f, https://techcommunity.microsoft.com/blog/windows-itpro-blog/secure-boot-playbook-for-certificates-expiring-in-2026/4469235
Increased Support Tickets
Failure to update Secure Boot certificates may result in increased support tickets from users experiencing boot issues or security warnings.
- roles: Help Desk Technician, IT Support Specialist
- references: https://support.microsoft.com/topic/secure-boot-certificate-updates-for-azure-virtual-desktop-06a8a1bc-2510-4ead-9bea-3698e1d6b1db, https://support.microsoft.com/topic/secure-boot-certificate-updates-for-windows-365-71839dd8-2832-44ed-9c60-57c04f99a645
User Experience Degradation
Users may experience degraded performance or functionality in their virtual environments if Secure Boot certificates are not updated, leading to frustration and decreased productivity.
- roles: End User, IT Administrator
- references: https://learn.microsoft.com/windows/deployment/windows-autopatch/monitor/secure-boot-status-report, https://techcommunity.microsoft.com/blog/windows-itpro-blog/secure-boot-playbook-for-certificates-expiring-in-2026/4469235
Compliance Risks
Organizations may face compliance risks if they fail to update Secure Boot certificates, potentially leading to legal and financial repercussions.
- roles: Compliance Officer, IT Manager
- references: https://support.microsoft.com/topic/secure-boot-certificate-updates-guidance-for-it-professionals-and-organizations-e2b43f9f-b424-42df-bc6a-8476db65ab2f#bkmk_deploment_playbook, https://support.microsoft.com/topic/monitoring-secure-boot-certificate-status-with-microsoft-intune-remediations-6696a27b-fa09-4570-b112-124965adc87f" target="_blank" rel="nofollow noopener noreferrer">https://support.microsoft.com/topic/monitoring-secure-boot-certificate-status-with-microsoft-intune-remediations-6696a27b-fa09-4570-b112-124965adc87f
Configutation Options**
XXXXXXX ... paid membership only
Opportunities**
XXXXXXX ... free basic plan only
Potentional Risks**
XXXXXXX ... paid membership only
IT Security**
XXXXXXX ... paid membership only
explanation for non-techies**
XXXXXXX ... free basic plan only
** AI generated content. This information must be reviewed before use.
a free basic plan is required to see more details. Sign up here
A cloudsocut.one plan is required to see all the changed details. If you are already a customer, choose login.
If you are new to cloudscout.one please choose a plan.
Last updated 2 days ago ago
