Hundreds of millions of users in a gray area, caught between aging hardware and a competitor offering a fresh path forward.
For the first time in fifteen years, Microsoft is allowing foundational Secure Boot certificates — the silent guardians that verify a computer's trustworthiness at the moment of startup — to expire, compelling hundreds of millions of Windows users to reckon with the passage of time written into their machines. The June deadline arrives not in isolation, but amid mounting scrutiny of Windows 11's aging architecture and the deliberate arrival of Google's Googlebook, a device designed to catch users at precisely the moment their loyalty to Windows becomes most expensive. What unfolds is less a technical update than a civilizational crossroads: the quiet obsolescence of familiar tools, and the human cost of choosing what comes next.
- Secure Boot certificates issued at Windows' security dawn in 2011 are expiring in June, and hundreds of millions of PCs must receive replacements or lose a critical link in the chain that keeps boot software trustworthy.
- Windows 10 machines locked out of security updates face the sharpest exposure — no new certificates, no patch cycle, and a hard obsolescence deadline arriving in October 2026.
- Beneath Windows 11's surface, researchers have surfaced thirty-year-old legacy code and a CPU speed trick designed to make the Start menu feel faster, fueling a backlash that Microsoft has been forced to publicly defend.
- Google has timed the Googlebook launch — AI-native, premium-hardware, cloud-first laptops — to land precisely when Windows 10 users are most vulnerable to switching, offering a cheaper exit before October's deadline.
- Microsoft is rolling out replacement certificates through monthly patches and urging users to check their Windows Security App, but the window is narrowing and the competitive pressure is no longer theoretical.
In two weeks, Microsoft will allow a critical security certificate to expire for the first time in fifteen years. The Secure Boot certificates, first issued in 2011, verify trusted boot software each time a computer starts. Every Windows machine still relying on them must receive replacements before June, or face a gap in the security chain that protects the startup process.
The scale is significant — Microsoft estimates hundreds of millions of PCs are affected. Replacement certificates have been rolling out through monthly security updates since April, and most machines purchased in the last two years are already covered. Users can check their status through the Windows Security App. For those still waiting, the update should arrive through the standard patch cycle, though Microsoft has warned it may trigger an additional one-time restart.
Not every machine will receive the update. Hundreds of millions of Windows 10 PCs ineligible for security patches will not get new Secure Boot certificates, leaving them exposed to additional risks starting next month. Microsoft is pointing affected users toward its extended security update program as a stopgap.
The certificate deadline is only one of several pressures converging on aging Windows hardware. Researchers have found thirty-year-old code still running core functions inside Windows 11, and Microsoft has faced criticism over a CPU speed technique used to make the Start menu feel more responsive — a practice the company has defended but been compelled to address publicly.
Into this uncertainty, Google has launched Googlebook: a new category of AI-native, cloud-first laptop built with premium hardware from partners including Acer, Dell, HP, and Lenovo. Unlike Chromebooks, Googlebooks are designed around Gemini AI from the ground up. The timing is precise — Windows 10 support ends October 14, 2026, leaving users less than eighteen months to upgrade, pay for extended support, or leave the platform entirely. Google's new line arrives exactly when that choice becomes urgent, and Microsoft now faces hundreds of millions of users suspended between expiring certificates, aging hardware, and a competitor offering a cheaper way forward.
In two weeks, Microsoft will let a critical security certificate expire for the first time in fifteen years. The Secure Boot certificates, first issued in 2011 when the feature launched, are reaching the end of their validity. Every Windows machine that relies on them will need new ones installed before the deadline arrives in June, or face a gap in the security chain that verifies trusted boot software when a computer starts up.
The scope of this change is enormous. Microsoft estimates it affects hundreds of millions of Windows PCs. The company has been rolling out replacement certificates through regular monthly security updates since April, and most machines purchased in the last two years already have the new ones in place. Users can verify their status by opening the Windows Security App. For everyone else, the update should arrive as part of the standard patch cycle over the coming weeks.
But there's a catch. Microsoft has warned that applying these new certificates may trigger an additional restart on affected machines. The company says this "one time restart" will occur after the Secure Boot certificate update is applied, and while it will likely happen in May for most users, it could happen at any point over the coming months as the rollout continues. The Windows Update process and Windows Security App will display the machine's Secure Boot status with red warnings indicating that action is needed before the deadline passes.
Not every Windows machine will receive the update, however. Hundreds of millions of Windows 10 PCs are ineligible for security updates and will not get new Secure Boot certificates. These machines will face additional security risks starting next month. Microsoft is encouraging affected users to enroll in its extended security update program if they want protection beyond the standard support window.
The certificate expiration is only one of several pressures now bearing down on aging Windows machines. Beneath Windows 11's polished surface, researchers have discovered thirty-year-old code still running core functions. Microsoft has also faced criticism over a performance-boosting technique that temporarily increases CPU speed to make the Start menu feel more responsive. The company has defended the practice, noting that macOS and Linux employ similar tactics to make applications feel faster, but the backlash has been vocal enough to demand a response.
Meanwhile, Google is making a calculated move to capture Windows users caught in this transition. The company announced Googlebook, a new category of laptop built around artificial intelligence and cloud-first computing. Unlike Chromebooks, which Google introduced fifteen years ago, Googlebooks are designed with Gemini AI at their core and built with premium hardware in partnership with manufacturers like Acer, ASUS, Dell, HP, and Lenovo. For Windows 10 users staring down an October 14, 2026 obsolescence deadline and facing the cost of a new machine, Googlebook offers a cheaper alternative.
The timing is deliberate. Windows 10 support ends in October 2026, giving users less than eighteen months to decide whether to upgrade to Windows 11, pay for extended support, or switch platforms entirely. Google's new product line arrives precisely when that decision becomes urgent. Microsoft now faces hundreds of millions of users in a gray area, caught between aging hardware, expiring security certificates, and a competitor offering a fresh path forward. October is approaching fast, and the next move belongs to Microsoft.
Notable Quotes
Microsoft stated it is updating the Secure Boot certificates originally issued in 2011 to ensure Windows devices continue to verify trusted boot software.— Microsoft
Google described Googlebook as a new category of laptops built with Gemini's helpfulness at their core, with premium hardware and seamless integration with Android phones.— Google
The Hearth Conversation Another angle on the story
Why does a certificate that's been working for fifteen years suddenly need to expire?
Because security certificates have a lifespan built in from the start. It's not that the 2011 certificate stopped working—it was always designed to expire at a specific date. Microsoft is replacing it before that happens to maintain the chain of trust that verifies your boot process.
But if hundreds of millions of machines don't get the new certificate, what actually happens to them?
They become vulnerable. Without a valid certificate, the system can't verify that the boot software is trustworthy. It doesn't mean the machine stops working, but it loses a critical layer of security that prevents certain kinds of attacks.
The article mentions thirty-year-old code buried in Windows 11. How does that fit into this story?
It's a symptom of the same problem. Microsoft is managing legacy systems that have accumulated over decades. They're trying to modernize while keeping everything backward compatible, which creates technical debt. The Secure Boot update is just one visible consequence of that complexity.
Is Google's Googlebook actually a threat to Microsoft, or just marketing?
It's a real threat because it's arriving at exactly the right moment. Windows 10 users are forced to make a decision in the next eighteen months. Googlebook offers them a cheaper, simpler alternative that doesn't require them to buy a new Windows machine or pay for extended support.
What does Microsoft do now?
They have to make Windows 11 compelling enough that users want to upgrade, or they lose those customers to Google. The certificate expiration itself isn't the problem—it's a routine maintenance task. But it's happening while Windows 11 is still fighting perception issues, and while Google is offering an escape route.