Secure Boot certificate updates are broken on some PCs, Microsoft confirms

PCWorld reports that Microsoft has confirmed Secure Boot certificate update failures on certain PCs, particularly affecting HP models after certificates expired on June 24th. While PCs continue operating normally, outdated certificates gradually reduce security protection against new threats over time for Windows 10/11 users. Microsoft temporarily paused new certificate issuance for affected devices, requiring users to wait for firmware updates from their PC manufacturers. On June 24th, several older Microsoft certificates expired, meaning that many Windows 10 and 11 users need to update their computers. Without properly updated certificates, Windows Secure Boot will stop working and can no longer guarantee secure startups. However, it's now confirmed that Microsoft has temporarily suspended the issuance of new certificates for certain PCs, including a number of HP models.