Posted on 05/05/2026 5:17:18 AM PDT by SunkenCiv
...1.6 billion Windows users -- most of whom are affected by its decision to terminate critical Secure Boot certificates for the first time since 2011. April's various Windows updates included new status updates and refreshed certificates for all eligible PCs. Check yours now.
Microsoft says that following these changes to Windows Update, the security app will "show whether devices have received these updates, their current status, and whether action is needed" under Device Security... This escalates to a "red (critical)" warning in 10 days, affecting all PCs where action is needed.
The original Secure Boot certificates start expiring in June, by which time you need to ensure you have installed new ones. If not, Microsoft warns, "this limits the device's protection against emerging threats and may affect scenarios that rely on Secure Boot trust, such as BitLocker hardening or third-party bootloaders."...
Phase 1 of the changes hit PCs last month. New icon badges "reflect the current certificate state. During Phase 1, badges are either green or yellow (caution), and the user can select the dismissal option to revert a yellow icon badge to green."
The more critical Phase 2 will hit Windows 10 users on May 13 and Windows 11 users on May 16. During Phase 2, "security app notifications for actionable and unserviceable Secure Boot states" will show a yellow caution state or a red critical state. You should check for this on your PC after those dates.
Microsoft says that if yellow, users can "select dismissal option to suppress new notifications for this state." Whereas if the state is red, there will be an option "for the user to select 'I accept the risks, don't remind me.'" If you do that, Windows Update "reverts badges to 'green' and suppresses all new notifications."
(Excerpt) Read more at forbes.com ...
|
Click here: to donate by Credit Card Or here: to donate by PayPal Or by mail to: Free Republic, LLC - PO Box 9771 - Fresno, CA 93794 Thank you very much and God bless you. |
I just had the notice pop up and wondered what it was. Sez it'll take 20 minutes to 1 hour, longer than most updates.
Windows: Like AIDS but not as treatable.
πππππππ ππ€£ It's already nagging me about my browser, which it had stopped doing. AND, I have not installed the update yet.
I read this article two times ... and I still do not understand:
1. What it means.
2. What will happen if I do nothing.
3. What -- precisely -- I need to do.
Whatβs not clear from this excerpt is if computers will even be able to boot or read encrypted volumes, if not getting the βfix.β
If this happens, you lose access to all the data.
The article seems obtuse.
I just update my computers, when the ones I use do an auto-update then I pull out the ones I don’t use to update them, although for those I usually let a couple or few months of updates accumulate.
For this I will pull out the old W10 laptops.
Avoid all security updates. Just use a separate laptop for financial transactions only with bank & broker. Never browse to any other site. Use another PC for everything else
I have been doing this since Windows 95, never had a problem with security. If my browsing PC gets hacked or infects with virus, (rarely happened) just format the hard drive and install fresh copy of windows. No virus survives that.
... just format the hard drive and install fresh copy of windows. No virus survives that.
~~~
Except for root kits.
Good advice though.
You should not be paying your bills or doing your banking on the same computer that you go onto social media with and play words with friends (or whatever the heck people are playing these days).
I think the problem is, the writer is just paraphrasing MS’ press release about it. Hell, I can do that.
Thanks!
And I hate the "One drive" thing. Why would ANYONE want to store their personal documents on someone else's computer.? They start gripping at you about not having enough "Cloud" space. One can store more info on a cheap thumb drive than they can on their stinking "Cloud".
I damned sure ain't going to give them money for more storage... (spit)
Avoid all security updates. Just use a separate laptop for financial transactions only with bank & broker. Never browse to any other site. Use another PC for everything else
I have been doing this since Windows 95, never had a problem with security. If my browsing PC gets hacked or infects with virus, (rarely happened) just format the hard drive and install fresh copy of windows. No virus survives that.
xxxxxxxxxxxxxxxxxxxxx
thanx for sharing your process
couldn’t have said it better
In other words, this article reads like a government press release.
ctl-alt-del
“3. What — precisely — I need to do.”
You really don’t know?
If they haven’t already, someone who is smug and morally superior will be along to tell you shortly.
Spoiler alert: the answer always is:
Switch to Linux
Switch to Linux
Switch to Linux
Switch to Linux
Switch to Linux
Switch to Linux
Switch to Linux
Switch to Linux
Switch to Linux
Switch to Linux
Switch to Linux
Switch to Linux
Switch to Linux
12 month subscription - from memory - about $120.
This enabled me to drop my expensive McAfee security software and use MSFT Windows Defender instead.
Plus, I get general Windows 10 updates each month.
I think all Windows 10 updates will end in October.
I will try to hold on as long as possible.
I have a Dell-All-In-One big screen that has run flawlessly for eight years.
Eight years - not one problem! Not even one Help Desk call!
I will NEVER get this lucky again.
As long as you donβt buy Lenovo.
Lenovo put code in the BIOS that would automatically download an official Lenovo app that would spy on your HTTPS traffic by acting as a man-in-the-middle program to decrypt SSL traffic and send to Lenovo. It would automatically reinstall the program when Windows was reinstalled.
Only use Dell products. I do not trust Chinese products.
Thanks for that heads-up.
After tens of thousands electronic transactions, no problems at all. Have not used mail to pay bills in decades.
Used laptops are so cheap on eBay, makes no sense to use any anti-virus software. It always slows down the computer.
Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.