Secure Boot certificate expiry (June 2026)

A global issue has been identified regarding Secure Boot certificates on certain PC platforms. As a result, Secure Boot certificates may expire around June 2026 on some modules.

Important that Windows will suddenly stop working.
However, after expiry, it may prevent important security updates and future Windows upgrades from being installed correctly.

To prevent this issue, it is important to carry out a BIOS update in good time. We have a BIOS update available for each relevant product.

What is the issue?

Secure Boot uses certificates to determine whether software (such as Windows Boot Manager) is trustworthy when starting up the PC.

For certain platforms, these certificates may expire in June 2026. Therefore, these certificates must be updated via a BIOS update before that time, so that Secure Boot continues to work with new certificates.

Microsoft references:

• Microsoft Support: Windows Secure Boot certificate expiration and CA updates
• Microsoft TechCommunity: Act now: Secure Boot certificates expire in June 2026

What is the impact if nothing is done?

If you do not perform an update before June 2026, the following limitations may occur:

1. After June 2026, the PC will no longer be able to install Secure Boot security updates.
2. After June 2026, the PC will no longer trust software signed with the new certificates (e.g. updates from Microsoft or third parties).
3. By October 2026, the PC will no longer receive security fixes for Windows Boot Manager.
4. Windows will still remain accessible and the PC will generally continue to function as normal.
5. Major Windows upgrades will no longer be possible, such as:
   • Upgrade from Windows 11 24H2 → 25H2 

What steps do I need to take?

The customer must perform a BIOS update to prepare the Secure Boot certificates for the change in 2026. We have a BIOS update available for each relevant product (see table below).

Good to know: the mainboard modules of the Prowise Touchscreen Max automatically receive a BIOS update via an over-the-air Prowise Central update.

Performing the update (in Windows)

The BIOS update is performed via Windows, using a simple script:

1. Download the BIOS update for the correct model. (see table)
2. Extract the file (zip).
3. Open the folder
4. Run the file as administrator: (right-click on file name)
   • update.bat
5. Follow the instructions on the screen.
6. The PC may restart during the process.

Note: During a BIOS update, the PC must not lose power.

• For All-in-One PCs: always keep mains power connected.
• For the PC module: ensure the power supply is stable.

Frequently Asked Questions (FAQ)

Will Windows still work after June 2026 if this is not done?
Yes. Windows will usually still start and function as normal.
However, the PC may no longer be able to correctly install security updates and future upgrades.

Is this a Prowise issue?
No. This is a global change in Secure Boot certificates, announced by Microsoft, which affects almost all Intel platforms. We are therefore providing BIOS updates to prepare customers for this.

Does this need to be done on all products?
No, only for products listed in the table below for which Secure Boot certificates may expire.

BIOS update overview

In the following table you will find the various BIOS updates per model: