[Commercial PC] Announcement on the Windows Secure Boot Certificate Update
Microsoft plans to begin phasing in a replacement for the Windows Secure Boot certificates starting in 2026.
Secure Boot certificates help prevent boot-time malware—such as bootkits—from injecting loaders during startup, ensuring a clean and trusted boot environment.
The existing “Microsoft Secure Boot 2011” certificate is nearing expiration. If you do not update to the new certificate, your device may no longer be able to receive future updates for the Windows Boot Manager and other security components.
To ensure your business PC continues to receive boot-time security protection and system updates, please review the information below to confirm your device status.
Is My Device Affected?
1. Not Affected (New Certificate Supported by Default)
All business PCs shipped in 2024 or later, as well as all future new models, have the new Secure Boot certificate pre-integrated. No manual update is required.
Laptops (NB): The following models, as well as all series launched after 2024.
| Model Name |
| BM3406CGA |
| BM3606CGA |
| PM5406CGA |
| PM5606CGA |
| BM3406CHA |
| BM3606CHA |
| PM3406CHA |
| PM3606CHA |
| PM3406CKAZ |
| PM3406CKA |
| PM3606CKA |
| PM1403CDA |
| PM1503CDA |
| B5405CCA |
| B3405CCA |
| B5605CCA |
| B3605CCA |
| P3405CVA |
| P3605CVA |
| B5605CVA |
| B3605CVA |
| B5405CVA |
| B3405CVA |
| BR1204FTA |
| BR1204CTA |
| BR1104FTA |
| BR1104CTA |
| B1403CTA |
| B1503CTA |
| B3402FVA |
| BM1403CDA |
| BM1503CDA |
| B1403CVA |
| B1503CVA |
| P1403CVA |
| P1503CVA |
| P5405CSA |
Desktops: The following models, as well as all series launched after 2024.
| Model Name |
| P500SV |
| V500SV |
| PM700MK |
| PM700SK |
| D900MF |
| D900SF |
| T701MF |
| D700MF |
| T500MV |
| P500MV |
| D700MER |
| D700ME |
| X500MA |
| D701MER |
| S701TER |
| D901MDR |
| D500TER |
| D700TER |
| D901SDR |
| S501MER |
| PD500TE |
| G15DS |
| D800MDR |
| G16CH |
| G13CH |
| S501ME |
| D500TE |
| D700TE |
| G35CA |
| D900MD |
| D500SD |
| D500MD |
| D700MD |
| D500TD |
| D700TD |
| G15CF |
| D900MC |
| D500SC |
| D700SC |
| D500TC |
| D700TC |
| PD500TC |
| G10CE |
| G35CG |
| GA35DX |
| D700SF |
| V500MV |
| D501MER |
| D701SER |
| D501SER |
| T501MV |
| D900MDR |
| D800SDR |
| D900SDR |
| S502ME |
| S502MER |
| D500MER |
| D500SER |
| D700SER |
| D900SC |
| D900SD |
| G35DX |
| S501MC |
| S502MD |
| S500TD |
| S501MD |
| S500TC |
| S500MC |
| S700SC |
| D700MC |
| S500MD |
| S500SC |
| S500SD |
| D701TC |
| D700SD |
| D500SE |
| D500ME |
| D700SE |
All-in-One (AIO): The following models, as well as all series launched after 2024.
| Model Name |
| PM640KA |
| PM670KA |
2. Models That Require an Update
If your model is not listed above, it means the device is currently using the older certificate and will need to be updated.
How Do I Get the Update?
For affected models, ASUS has completed submission of the new certificate. The update will be automatically delivered by Microsoft via Windows Update.
Recommended action: Go to Settings > Windows Update and make sure automatic updates are enabled.
Automatic installation: The system will automatically download and install the latest security certificate—no manual tools or downloads are required.