Microsoft discontinued software support for Windows 10 in October 2025, marking the end for the operating system introduced in 2015. While these PCs continue to operate, they face heightened risks from bugs, glitches, and cyberattacks without monthly security patches.
New Secure Boot Certificates Roll Out
Microsoft now deploys updated Secure Boot certificates to compatible Windows PCs, as the originals issued in 2011 approach expiration in June 2026. Secure Boot verifies that only trusted Microsoft software loads during startup, blocking potential malware.
Eligible devices receive these free updates automatically. However, unsupported versions like Windows 10—excluding those enrolled in Extended Security Updates (ESU)—do not qualify.
“Devices running unsupported versions (Windows 10 and older, excluding those enrolled in Extended Security Updates) do not receive Windows updates and will not receive the new certificates,” Microsoft states. “Customers should always use a supported version of Windows for optimal performance and protection.”
Extended Security Updates Option
The ESU program extends security updates for Windows 10 users through October 2026. Most individuals with a Microsoft account access it at no cost.
Consequences of Missing the Update
Without the new certificates, devices function normally with existing software. Yet, they enter a degraded security state.
“The device will continue to function normally, and existing software will keep running,” Microsoft explains. “However, it limits future boot-level protections. As new vulnerabilities emerge, these systems grow more exposed without new mitigations. Over time, compatibility issues may arise with newer operating systems, firmware, hardware, or Secure Boot-dependent software.”
Upgrade Paths Forward
Microsoft provides Windows 11 as a free upgrade for qualifying Windows 10 PCs that meet minimum hardware requirements. Users outside ESU or ineligible for the upgrade must purchase new Windows 11-compatible hardware to restore full security.
