Microsoft Updates Windows With New One Time Restart Feature

Microsoft is implementing an update to Secure Boot certificates across a majority of Windows PCs to ensure the continued verification of trusted boot software. This technical transition, which addresses certificates originally issued in 2011, may result in some users experiencing an additional system restart during the installation of Windows updates over the coming months.

The update is necessary because the critical Secure Boot certificates, first launched in 2011, are set to expire in June 2026. This marks the first time these certificates have reached their expiration date, requiring Microsoft to install new certificates on all affected devices before the deadline to maintain system security and stability.

According to reporting from Forbes, Microsoft is updating the Secure Boot certificates originally issued in 2011 to ensure Windows devices continue to verify trusted boot software.

Deployment and User Impact

The rollout of the new certificates is being handled through regular monthly security updates. Some users may have already received the update in April 2026, while others are scheduled to receive it in May 2026. Because the process is ongoing, the update may occur at any point over the next few months as certificates are transitioned.

While many updates are seamless, Microsoft has warned that this specific certificate change may trigger an unexpected restart during the installation process.

With recent and upcoming Windows updates over the next few months, some users might experience one additional restart during installation. This one time restart occurs after a Secure Boot certificate update is applied.

Microsoft

Not all Windows users will be affected by this requirement. Individuals who purchased their PCs since May 2024 are likely already running the new certificates and will not experience this specific transition.

Verification and System Security

Secure Boot is a security standard that ensures a device boots using only software that is trusted by the original equipment manufacturer. By updating the expiring certificates, Microsoft prevents potential boot failures or security vulnerabilities that could arise if the system could no longer verify the trusted boot software.

Users who wish to check the status of their Secure Boot certificates can do so through the Windows Security App on their devices.

The transition is critical for maintaining the chain of trust during the startup process, ensuring that malware or unauthorized operating systems cannot load before the primary OS begins to run.