{"id":13858,"date":"2025-11-19T05:02:45","date_gmt":"2025-11-18T20:02:45","guid":{"rendered":"https:\/\/m365jp.net\/?p=13858"},"modified":"2025-11-19T05:04:38","modified_gmt":"2025-11-18T20:04:38","slug":"mc1185931-secure-boot-playbook-for-certificates-expiring-in-2026-2","status":"publish","type":"post","link":"https:\/\/m365jp.net\/index.php\/2025-11-19-mc1185931-secure-boot-playbook-for-certificates-expiring-in-2026-2","title":{"rendered":"MC1185931 | Secure Boot playbook for certificates expiring in 2026"},"content":{"rendered":"<div class=\"postie-post\">\n<div>\n<hr>\n<table id=\"section\">\n<tbody>\n<tr>\n<th width=\"95%\">MC1185931 | Secure Boot playbook for certificates expiring in 2026<\/th>\n<\/tr>\n<\/tbody>\n<\/table>\n<hr>\n<table id=\"data\">\n<tbody>\n<tr>\n<th>Classification<\/th>\n<td>stayInformed<\/td>\n<\/tr>\n<tr>\n<th>Last Updated<\/th>\n<td>11\/18\/2025 19:41:56<\/td>\n<\/tr>\n<tr>\n<th>Start Time<\/th>\n<td>11\/18\/2025 19:41:54<\/td>\n<\/tr>\n<tr>\n<th>End Time<\/th>\n<td>11\/18\/2026 19:41:54<\/td>\n<\/tr>\n<tr>\n<th>Message Content<\/th>\n<td>\n<div>Secure Boot helps ensure that only trusted software runs during the boot sequence. It uses cryptographic keys, known as certificate authorities (CAs), to validate that firmware modules come from a trusted source. After 15 years, the Secure Boot certificates   that are part of many Windows systems will start expiring in June 2026. These certificates were originally issued in 2011. Many Windows PCs manufactured since 2024 already have updated (2023) certificates. For the remaining devices, we recommend that you start   monitoring the progress of certificate updates today as well as prepare for and install new certificates on devices that aren\u2019t automatically getting them through Windows updates. An initial set of tools and guidance is now available to support you in this   effort.<\/div>\n<div>&nbsp;<\/div>\n<div><b>When will this happen:<\/b><\/div>\n<div>While Microsoft will deliver the new 2023 Secure Boot certificates through Windows monthly updates\u2015with original equipment manufacturers (OEMs) offering firmware updates to help ensure compatibility\u2015you can proactively install the 2023 CAs before the 2011   CAs start expiring in June of 2026.<\/div>\n<div>&nbsp;<\/div>\n<div><b>What you need to do to prepare:<\/b><\/div>\n<div>Read the <a href=\"https:\/\/techcommunity.microsoft.com\/blog\/windows-itpro-blog\/secure-boot-playbook-for-certificates-expiring-in-2026\/4469235\" rel=\"noopener noreferrer\" target=\"_blank\">  Secure Boot playbook for certificates expiring in 2026<\/a> for steps you can take today to help ensure your devices stay protected after June 2026. Specifically, you can now:<\/div>\n<ul>\n<li>Inventory and prepare your environments for this change.<\/li>\n<li>Monitor and check your devices for Secure Boot status.<\/li>\n<li>Apply OEM firmware updates before Microsoft updates.<\/li>\n<li>Plan and pilot your Secure Boot certificate deployments.<\/li>\n<li>Use available tools to troubleshoot and remediate common issues.<\/li>\n<\/ul>\n<div>  <\/div>\n<div>If you\u2019d like to deploy the new Secure Boot certificates yourself today, you can utilize registry keys, WinCS, or Group Policy. Soon, you\u2019ll be able to use scalable MDM solutions, such as Microsoft Intune. We will provide an update when this method is   available.<\/div>\n<div>&nbsp;<\/div>\n<div><b>Additional information:<\/b><\/div>\n<div>Bookmark <a href=\"https:\/\/aka.ms\/GetSecureBoot\" rel=\"noopener noreferrer\" target=\"_blank\">  https:\/\/aka.ms\/GetSecureBoot<\/a> for more information about this change, detailed guidance for managing Secure Boot certificate update, and answers to frequently asked questions.<\/div>\n<\/td>\n<\/tr>\n<tr>\n<th>Machine Translation<\/th>\n<td>\n<div>Secure Boot\u306f\u3001\u30d6`\u30c8\u30b7`\u30b1\u30f3\u30b9\u4e2d\u306b\u4fe1m\u3067\u304d\u308b\u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u306e\u307f\u304c\u5e7c\u9ccf\u5de5\u6bea\u745c\u0394\u6454\u7b4f\u84fc\u57c2\uff35J^Cv(CA)\u3068\u547c\u3070\u308c\u308b\u6697\u53f7I\u3092\u7528\u3044\u3066\u3001\u30d5\u30a1`\u30e0\u30a6\u30a7\u30a2\u30e2\u30b8\u30e5`\u30eb\u304c\u4fe1m\u3067\u304d\u308b\u30bd`\u30b9\u304b\u3089\u6765\u3066\u3044\u308b\u3053\u3068\u3092\u8bd5^\u3057\u307e\u3059\u300215\u5e74\u5f8c\u3001\u591a\u304f\u306eWindows\u30b7\u30b9\u30c6\u30e0\u306b\u642dd\u3055\u308c\u3066\u3044\u308bSecure Boot^\u660e2026\u5e746\u6708\u306b\u6709\u79d1\u8c19\u84fc\u8096\u6b37\u84fc\u57c2\uffe5\u957f\u6b37\u6901\u5367^\u660e2011\u5e74\u306bk\u884c\u3055\u308c\u307e\u3057\u305f\u30022024\u5e74\u4ee5\u964d\u306bu\u9020\u3055\u308c\u305f\u591a\u304f\u306eWindows PC\u306f\u3001\u3059\u3067\u306b(2023\u5e74)\u306e^\u660e\u86c9\u3009\u76f2\u7b4f\u76ae\u3044\u84fc\u57c2\uff12\u8096\u8f98\u8fdd\u948e\u5578\u3045\u5de5\u6454\u819c\u3044\u76ae\u7a00\u2494\u88a2\u6805\u6a35^\u660e\u80c3\u4f26r\u3092O\u3057\u59cb\u3081\u308b\u3068\u3068\u3082\u306b\u3001Windows\u30a2\u30c3\u30d7\u30c7`\u30c8\u3067\u81ea\u62e5\u819c\u55fd^\u660e\u86b4\u57ed\u6bd4\u30fb\u6901\u80dc\u3045\u948e\u5578\u3045\u5de5\u6454\u95f2\u9647\u7b4f\u3074^\u660e\u6d43\u53bb\u3045\u8797\u653b\u919b`\u30eb\u3092\u304a\u5e5b\u5e5b\u7b4f\u84fc\u57c2\uffe5\u957f\u7a33\u30fb\u6772M\u307f\u3092\u652f\u63f4\u3059\u308b\u305f\u3081\u306e\u521d\u671f\u306e\u30c4`\u30eb\u3068\u30ac\u30a4\u30c0\u30f3\u30b9\u304c\u7528\u610f\u3055\u308c\u3066\u3044\u307e\u3059\u3002<\/div>\n<div>&nbsp;<\/div>\n<div><b>\u3053\u308c\u306f\u3044\u3064gF\u3057\u307e\u3059\u304b:<\/b><\/div>\n<div>Microsoft\u306f\u65b0\u3057\u30442023\u5e74\u30bb\u30ad\u30e5\u30a2\u30d6`\u30c8^\u660eWindows\u306e\u6708\u6b21\u30a2\u30c3\u30d7\u30c7`\u30c8\u3092\u901a\u3058\u3066\u63d0\u4f9b\u3057\u307e\u3059\u304c\u3001\u30aa\u30ea\u30b8\u30ca\u30ebC\u5668\u30e1`\u30ab`(OEM)\u304c\u4e92Q\u6027_\u4fdd\u306e\u305f\u3081\u306b\u30d5\u30a1`\u30e0\u30a6\u30a7\u30a2\u30a2\u30c3\u30d7\u30c7`\u30c8\u3092\u63d0\u4f9b\u3057\u306a\u304c\u3089\u30012023\u5e74\u306eCA\u306f2026\u5e746\u6708\u306b\u671f\u9650\u5207\u308c\u306b\u306a\u308b\u524d\u306beO\u7684\u306b\u30a4\u30f3\u30b9\u30c8`\u30eb\u3067\u304d\u307e\u3059\u3002<\/div>\n<div>&nbsp;<\/div>\n<div><b>\u6d43\u97e6\u90e1\u5e5b\u6454\u6d43\u6bea\u4f3d\u957f:<\/b><\/div>\n<div><a href=\"https:\/\/techcommunity.microsoft.com\/blog\/windows-itpro-blog\/secure-boot-playbook-for-certificates-expiring-in-2026\/4469235\" rel=\"noopener noreferrer\" target=\"_blank\">2026\u5e74\u306b\u671f\u9650\u5207\u308c\u3068\u306a\u308b^\u660eSecure Boot\u30d7\u30ec\u30a4\u30d6\u30c3\u30af\u3092i\u3093\u3067\u30012026<\/a>\u5e746\u6708\u4ee5\u964d\u3082\u30c7\u30d0\u30a4\u30b9\u3092\u4fddo\u3057A\u3051\u308b\u305f\u3081\u306b\u4eca\u65e5\u304b\u3089\u53d6\u308b\u3079\u304d\u30b9\u30c6\u30c3\u30d7\u3092\u3054B\u4ecb\u3057\u307e\u3059\u3002\u5177\u4f53\u7684\u306b\u306f\u3001\u4eca\u3067\u306f\u4ee5\u4e0b\u306e\u3053\u3068\u304c\u3067\u304d\u308b\u3088\u3046\u306b\u306a\u308a\u307e\u3057\u305f:<\/div>\n<ul>\n<li>h\u5883\u3092\u30a4\u30f3\u30d9\u30f3\u30c8\u30ea\u7ba1\u7406\u3057\u3001\u3053\u306e\u6d60\u6d43\u00e0\u6d43\u7b4f\u84fc\u7b4f\u7ec0\u0391<\/li>\n<li>\u30c7\u30d0\u30a4\u30b9\u306e\u30bb\u30ad\u30e5\u30a2\u30d6`\u30c8\u306e\u72b6B\u3092O\u3057\u3001\u30c1\u30a7\u30c3\u30af\u3057\u3066\u304f\u3060\u3055\u3044\u3002<\/li>\n<li>Microsoft\u306e\u30a2\u30c3\u30d7\u30c7`\u30c8\u3088\u308a\u5148\u306bOEM\u30d5\u30a1`\u30e0\u30a6\u30a7\u30a2\u306e\u30a2\u30c3\u30d7\u30c7`\u30c8\u3092m\u7528\u3057\u3066\u304f\u3060\u3055\u3044\u3002<\/li>\n<li>Secure Boot^\u660e\u63e1\u5f52_\u3092\u753b\u3057\u3001\u30d1\u30a4\u30ed\u30c3\u30c8\u7684\u306bg\u65bd\u3057\u307e\u3057\u3087\u3046\u3002<\/li>\n<li>\u5229\u7528\u53ef\u80fd\u306a\u30c4`\u30eb\u3092\u4f7f\u3063\u3066\u30c8\u30e9\u30d6\u30eb\u30b7\u30e5`\u30c6\u30a3\u30f3\u30b0\u3084\u4e00\u822c\u7684\u306a}\u306e\u4fee\u6b63\u3092\u884c\u3044\u307e\u3057\u3087\u3046\u3002<\/li>\n<\/ul>\n<div>  <\/div>\n<div>\u3082\u3057\u4eca\u65e5\u3001\u65b0\u3057\u3044\u30bb\u30ad\u30e5\u30a2\u30d6`\u30c8^\u660e\u8703\u82d1\u8bc1\u94a6\u5f52_\u3057\u305f\u3044\u9f8a\u6089\u7a00\u6b39\u5f17\u653b\u53bb\u8f9a`\u3001WinCS\u3001\u307e\u305f\u306f\u30b0\u30eb`\u30d7\u30dd\u30ea\u30b7`\u3092\u5229\u7528\u3067\u304d\u307e\u3059\u3002\u307e\u3082\u306a\u304f\u3001Microsoft Intune\u306e\u3088\u3046\u306a\u30b9\u30b1`\u30e9\u30d6\u30eb\u306aMDM\u30bd\u30ea\u30e5`\u30b7\u30e7\u30f3\u3092\u4f7f\u3048\u308b\u3088\u3046\u306b\u306a\u308a\u307e\u3059\u3002\u3053\u306e\u65b9\u6cd5\u304c\u5229\u7528\u53ef\u80fd\u306b\u306a\u308a\u6b21\u7b2c\u3001\u307e\u305f\u87fe\u599e\u3044\u90e1\u7b4f\u84fc\u57c2<\/div>\n<div>&nbsp;<\/div>\n<div><b>\u8ffd\u52a0\u60c5:<\/b><\/div>\n<div>\u3053\u306e\u6d93\u5367\u3001Secure Boot^\u660e\u80c3\u9e7f\u82be\u6067\u788ev\u3059\u308b\u306a\u30ac\u30a4\u30c0\u30f3\u30b9\u3001\u3088\u304f\u3042\u308b|\u3078\u306e\u56de\u7b54\u306b\u3064\u3044\u3066\u306f <a href=\"https:\/\/aka.ms\/GetSecureBoot\" rel=\"noopener noreferrer\" target=\"_blank\">  \u3001https:\/\/aka.ms\/GetSecureBoot<\/a> \u30d6\u30c3\u30af\u30de`\u30af\u3057\u3066\u304f\u3060\u3055\u3044\u3002<\/div>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table><\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>MC1185931 | Secure Boot playbook for certificates expiring in 2026 Classification stayInformed Last Updated 11 [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-13858","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/posts\/13858","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/comments?post=13858"}],"version-history":[{"count":0,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/posts\/13858\/revisions"}],"wp:attachment":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/media?parent=13858"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/categories?post=13858"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/tags?post=13858"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}