Microsoft is automatically replacing Secure Boot certificates for older PCs before they start to expire later in 2026; Secure Boot was first introduced in 2011
Devices that don't receive new Secure Boot certificates may miss out on future security updates.