{"id":2532,"date":"2026-03-19T03:38:14","date_gmt":"2026-03-19T03:38:14","guid":{"rendered":"https:\/\/service.geekompc.com\/?post_type=faq&p=2532"},"modified":"2026-04-28T08:57:47","modified_gmt":"2026-04-28T08:57:47","slug":"instructions-regarding-the-secureboot-certificate-for-geekom-devices","status":"publish","type":"faq","link":"https:\/\/service.geekompc.com\/fr\/faq\/instructions-regarding-the-secureboot-certificate-for-geekom-devices\/","title":{"rendered":"Instructions Regarding the SecureBoot Certificate for GEEKOM Devices"},"content":{"rendered":"

Updated on Mar,19, 2026<\/mark><\/em><\/strong><\/p>\n\n\n\n

\n\n\n\n

According to an official announcement from Microsoft, the legacy certificate used for Microsoft Secure Boot, which has been in place since 2011, will expire between June and October 2026. The expiration of this certificate may have certain implications for personal devices.<\/p>\n\n\n\n

Situation<\/th>Impact Level<\/th>Description<\/th><\/tr><\/thead>
Can the computer still boot normally?<\/td>Almost no impact<\/td>The computer can still start up, run programs, and access the internet normally after expiration<\/td><\/tr>
Daily use (office work, gaming, watching videos)<\/td>Basically no impact<\/td>Does not affect the browser, software, or files<\/td><\/tr>
Normal Windows updates<\/td>Most are possible<\/td>Regular security updates and feature updates can still be installed<\/td><\/tr>
Security protection during startup<\/td>Gradually decreases<\/td>Unable to receive new Boot Manager, Secure Boot database, or revocation list updates<\/td><\/tr>
Newly discovered bootkit\/startup-level vulnerability fixes<\/td>Cannot be obtained<\/td>Security decreases over the long term (like an house’s\u9632\u76d7\u95e8 lock not being replaced, but the door can still be used)<\/td><\/tr>
BitLocker encrypted drives<\/td>May be affected<\/td>Some enhanced functions or new mitigation measures cannot be applied<\/td><\/tr>
Very rare special cases<\/td>Third-party startup items may fail<\/td>Such as certain older graphics card VBIOS, special dual-boot bootloaders<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

In the short term, there will be virtually no noticeable impact, but long-term security will be compromised\u2014especially when new vulnerabilities emerge after the second half of 2026.<\/strong><\/p>\n\n\n\n

What Do You Need to Do as a Personal User?<\/h3>\n\n\n\n

1.Keep Windows Update enabled and install updates promptly<\/h4>\n\n\n\n

Settings \u2192 Windows Update \u2192 Advanced Options \u2192 Receive updates for other Microsoft products (turn on)
For most computers manufactured after 2020, the new 2023 certificate will be automatically pushed via regular cumulative updates in 2025\u20132026.<\/p>\n\n\n\n

2.Check if the update has been applied<\/strong><\/h4>\n\n\n\n

Open PowerShell as an administrator, then paste and run the following commands:<\/p>\n\n\n\n

Check for the 2011 certificate:<\/strong><\/p>\n\n\n\n

([System.Text.Encoding]::ASCII.GetString((Get-SecureBootUEFI db).bytes) -match ‘Microsoft Windows Production PCA 2011’)<\/p>\n\n\n\n

Check for the 2023 certificate:<\/strong><\/p>\n\n\n\n

([System.Text.Encoding]::ASCII.GetString((Get-SecureBootUEFI db).bytes) -match ‘Windows UEFI CA 2023’)<\/p>\n\n\n

\n
\"\"<\/figure>\n<\/div>\n\n\n
\n\n\n\n

Of course, you can also check in the BIOS and confirm whether the current BIOS version includes the CA2023 Secure Boot certificate. The specific path to check is shown in the figure below\uff1a<\/mark><\/strong><\/p>\n\n\n

\n
\"\"<\/figure>\n<\/div>\n\n
\n
\"\"<\/figure>\n<\/div>\n\n
\n
\"\"<\/figure>\n<\/div>\n\n
\n
\"\"<\/figure>\n<\/div>\n\n
\n
\"\"<\/figure>\n<\/div>\n\n\n

3.Check if the BIOS is Up to Date<\/h4>\n\n\n\n

According to information disclosed by the GEEKOM R&D department, as of March 19, 2026, the BIOS versions for the following models (and newer) already support the UEFI 2023 certificate. Updates for other models will also be completed before the UEFI 2011 security certificate expires.<\/mark><\/strong><\/p>\n\n\n\n

Intel Series<\/strong><\/td>BIOS Version<\/strong><\/td>AMD Series<\/strong><\/td>BIOS Version<\/strong><\/td><\/tr>
Air12 Lite<\/td>0.17<\/td>A5 U Series\uff085825u 7430u\uff09(65W Adapter)<\/td>2.43<\/td><\/tr>
Mini Air12\uff08N95)<\/td>0.44<\/td>A5 7640hs<\/td>0.01<\/td><\/tr>
IT12<\/td>2.34<\/td>A5 Pro<\/td>2.43<\/td><\/tr>
IT13<\/td>1.23<\/td>A5 Pro\uff087640HS\uff09<\/td>0.02<\/td><\/tr>
GT12 Pro<\/td>2.34<\/td>AE7<\/td>0.54<\/td><\/tr>
GT13 Pro<\/td>1.21<\/td>AE8<\/td>0.57<\/td><\/tr>
XT12 Pro<\/td>2.33<\/td>A7 7940HS
A7 7535HS<\/td>		0.58
2.42<\/td><\/tr>
XT13 Pro<\/td>1.22<\/td>A8<\/td>0.61<\/td><\/tr>
IT1 Mega<\/td>0.68<\/td>A6<\/td>2.39<\/td><\/tr>
IT13 Max<\/td>0.68<\/td>AX7 Pro<\/td>0.54<\/td><\/tr>
IT15 Max<\/td>0.68<\/td>AX8 Pro<\/td>0.56<\/td><\/tr>
GT1 Mega<\/td>0.68<\/td>AE8 Max<\/td>1.22<\/td><\/tr>
GT13 Max<\/td>0.68<\/td>A7 Max<\/td>1.26<\/td><\/tr>
GT15 Max<\/td>0.68(Intel Ultra1 Series)\/0.14\uff08Intel Ultra2 Series)<\/td>A8 Max<\/td>1.22<\/td><\/tr>
XT1 Mega<\/td>0.68<\/td>AX8 Max<\/td>1.22<\/td><\/tr>
Mini Air12\uff08N100)<\/td>0.42<\/td>A9 Max<\/td>0.25<\/td><\/tr>
IT15<\/td>0.78<\/td>A9 Mega<\/td>0.09<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n
\n\n\n\n

Merci d'avoir regard\u00e9. S'il y a des erreurs, vos corrections sont les bienvenues.<\/p>","protected":false},"excerpt":{"rendered":"

Overview of Required Action for GEEKOM Devices Regarding Microsoft\u2019s Security Certificate Expiration
\nMost GEEKOM devices have Secure Boot enabled by default, with certificate updates automatically delivered via Windows Update. Regular system and BIOS updates eliminate the need for manual intervention. Users are advised to verify certificate status and BIOS version to ensure ongoing security.<\/p>","protected":false},"template":"","faq_category":[23],"class_list":["post-2532","faq","type-faq","status-publish","hentry","faq_category-compatibility"],"acf":[],"_links":{"self":[{"href":"https:\/\/service.geekompc.com\/fr\/wp-json\/wp\/v2\/faq\/2532","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/service.geekompc.com\/fr\/wp-json\/wp\/v2\/faq"}],"about":[{"href":"https:\/\/service.geekompc.com\/fr\/wp-json\/wp\/v2\/types\/faq"}],"wp:attachment":[{"href":"https:\/\/service.geekompc.com\/fr\/wp-json\/wp\/v2\/media?parent=2532"}],"wp:term":[{"taxonomy":"faq_category","embeddable":true,"href":"https:\/\/service.geekompc.com\/fr\/wp-json\/wp\/v2\/faq_category?post=2532"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}