Windows Secure Boot 2011 certificates will expire in June 2026, and devices need to move to the 2023 Secure Boot certificates and newer boot manager.
Microsoft Defender XDR now provides visibility into devices that still need this update, making it easier to track readiness and reduce exposure across the environment.
Exposure Management → Recommendations → Devices → Misconfigurations (good adjustment if you have also Windows Servers onboarded to Defender for Endpoint P2)
Posted May 11, 2026, 5:22 AM UTC
10