ISSUE 23.25.1 • 2026-06-23 By Susan Bradley Tomorrow is the drop-dead date. Tomorrow, June 24, 2026, the Microsoft Corporation KEK CA 2011 certificate will expire. But your computer will still boot. Life will go on. The sun will rise. On June 27, 2026, the second certificate will expire for the Microsoft UEFI CA 2011 certificate. […]

ISSUE 23.21.1 • 2026-05-25 By Susan Bradley Microsoft is slowly but surely starting to roll out Secure Boot security fixes to more and more machines. I’m therefore lowering the MS-DEFCON level to 4. The May updates include not only the Secure Boot fixes but also a variety of other security-related patches. Start by installing KB5089549 […]

ISSUE 23.17.1 • 2026-04-28 By Susan Bradley The April updates continue to dribble out more fixes for Secure Boot certificates for some systems. But once you receive the April updates, you still may be waiting for the new certs to be installed. That happened to me on some systems. Nonetheless, the patching world is relatively […]

ISSUE 23.12.1 • 2026-03-24 By Susan Bradley This month has been relatively quiet for Microsoft Windows updates. Sure, there are the occasional “won’t install the update” situations that are usually fixed with a repair install over the top. I’ve become tired of seeing them. And there were two out-of-band updates for Windows 11 Enterprise 25H2, […]