This story is part of the Nerds News briefing for April 7, 2026. Watch the full episode on YouTube or read all six stories together in the main briefing.

Windows 11 Secure Boot Certificate Expiring: The April Patch You Can’t Skip

This is one of those situations where Microsoft updates something to break something on purpose, then gives you a couple of months to plan for it. The Windows 11 secure boot certificates are scheduled to expire on June 26, 2026, and devices that don’t pick up Microsoft’s replacement certificate may simply fail to boot after that date.

The replacement is rolling out as part of the April 2026 patch cycle, so the fix is already on its way to your machines. We patch every managed endpoint as aggressively as we can — but here’s the catch: if your computer is powered off during the maintenance window, it never sees the patch. We see this with clients all the time, and the result is always the same: the machine that wasn’t on for the update is the one that breaks first.

The ask is simple: save your work and leave your computers on at night. Auto-save covers most of the risk on the data side, and giving your machine a 2 a.m. reboot window means it gets patched, restarts, and is ready to go in the morning. If you wake up June 26 and discover a workstation that won’t boot, this is the patch that could have prevented it.

Watch the 60-second clip

How ACS helps

Stuff like this is exactly why we built our managed services packages — so small business owners don’t have to track every Microsoft announcement or wonder which patch matters. If you’d like an IT partner that watches this stuff for you and acts before it becomes a problem, schedule a quick call with our team and we’ll put a plan together.