The October 19, 2026 Windows Boot Manager Deadline: What IT Leaders Must Do Now
A Windows security change that many organizations may overlook is approaching its final 2026 milestone. The Microsoft Windows Production PCA 2011 certificate expires on October 19, 2026 . This certificate is used for signing the Windows boot loader and is being replaced by the Windows UEFI CA 2023 certificate. Microsoft has been rolling out updated Secure Boot certificates, but organizations with managed Windows fleets should not assume that every device has successfully completed the transition. The important point for IT leaders is that this is not simply a “Windows stops working on October 19” deadline . Microsoft states that devices without the new certificates may continue starting normally and can continue receiving ordinary Windows updates. However, they can lose future protections for early-boot components, including protections associated with the Windows Boot Manager and Secure Boot. Over time, that creates a growing security exposure. For businesses, the question shou...