In June 2026, Microsoft is retiring older Secure Boot certificates. Devices that don't have supported Secure Boot certificates could prompt users for a recovery key to unlock the device or they may have trouble starting up. While this Windows change isn't specific to Blue Border, we want to make sure that our customers are aware of this change, which may impact devices that you use to access Blue Border.

Microsoft is pushing updated Secure Boot certificates out automatically, but only to devices running Windows 10 22H2 or newer and installing the latest Windows updates. Devices that are running older operating system versions will need to be upgraded or replaced before the deadline to avoid potentially being blocked from starting the device.

Ensure a Device Will Get the Updated Certificates

To ensure a Windows device will get the updated certificates, you need to:

1. Install any pending Windows updates
2. Confirm you're running Windows 10 22H2 at a minimum
3. Install all future Windows updates when available

1. Install all Available Windows Updates

To ensure automatic updates are on and install all available updates:

1. Go to Settings.
2. Click Windows Update in the left menu or Update & Security > Windows Update.
3. If no updates show, click Check for updates. Then, install all available updates.
4. Restart the device.

This will ensure that your device is running the latest available version of Windows.

2. Confirm You're Running Windows 10 22H2 at a Minimum

To check your Windows device's operating system version:

1. Go to Settings.
2. Click System in the left menu.
3. Scroll down and click About.
4. Under Windows Specifications, check the device Edition and Version.

The following editions and versions will get the updated Secure Boot certificates automatically:

• Edition: Windows 11 (any version)
• Edition: Windows 10 and Version: 22H2

If you have an older edition or version, follow the steps above to confirm that there are no additional updates available. If you have installed all available updates and you still have an older edition or version, your device may not be eligible to update further. Given this upcoming Windows security update, we recommend proactively replacing devices that cannot update to Windows 10 22H2 at a minimum.

3. Install All Windows Updates When Available

Be sure to restart your computer to finish installing Windows updates whenever prompted. You will not receive the updated Secure Boot certificates if you don't install upcoming Windows updates.

If the device is managed by an internal or third-party IT provider, make sure that it's set to receive Microsoft monthly updates.

Check All Devices as a Company Manager

As a Company Manager, you can use the Export data option on the All Devices page in the Admin Portal to export a .csv file that includes your users' Device Operating System (Edition) and Device Operating System Version (Version). This file will make it easy for you to identify users who are logging in to Venn on devices that aren't running Windows 10 22H2 at a minimum. Learn how to export device information from Venn.

Devices with the following will get the updated Secure Boot certificates automatically:

• Device Operating System: Windows 11 (any Device Operating System Version)
• Device Operating System: Windows 10 and Device Operating System Version: 10.0.19045

For devices with an older operating system than listed above, work with users to follow the steps above to install the latest Windows updates.