Microsoft's Secure Boot protects your computer from dangerous bootkit malware. To keep your computer protected, the company is working to replace older Secure Boot certificates before they expire in June.
How will you know if your computer has received the latest certificates? Windows itself will tell you.
This week, with the April Patch Tuesday for Windows 11 and Windows 10, comes a new visual indicator and description that indicates the status of Secure Boot on your computer.
The new information will tell you whether you are protected with the latest certificates or whether you are still at risk.
How does it work?
In Windows 11, go to Settings, select Privacy & security, select Windows Security, and then click Device security. Scroll down to the Secure Boot setting.
In Windows 10, go to Settings, select Update & Security, select Windows Security, and then click Device Security. Scroll down to the Secure Boot setting.
The Secure Boot icon appears in one of three colors
Depending on your status, the Secure Boot icon will appear in one of three colors – green, yellow, or red. A green icon means your device is protected with no recommended actions. A yellow icon indicates that a security recommendation is waiting for you. A red icon indicates that something needs your immediate attention.
However, even a green icon doesn't necessarily mean you're OK. The message accompanying the icon provides more details.
On a spare Windows computer that I haven't updated in a while, the green icon appeared. However, the message said:
“Secure Boot is enabled, but your device is using an older boot trust configuration that should be updated.” On my main computer, where Secure Boot is enabled and up to date, the message said: “Secure Boot is enabled and all required certificate updates have been applied.”
To get the new Secure Boot certificates, just make sure you have applied the latest Windows updates.
Secure Boot is an important security feature, as it prevents bootkit malware as soon as you turn on your computer, something that Windows security software cannot do.
Although the press releases will range from very select to rare, I said I'd pass...because sometimes the editors hide.
