Microsoft has announced it will deliver new Secure Boot certificates via Windows Update starting March 2026 before 2011 certificates expire in June.