CriticalSecurity & Privacy
Linux and Secure Boot certificate expiration
A critical Microsoft Secure Boot certificate expires in September 2025, potentially preventing Linux installations on systems with Secure Boot enabled unless vendors push firmware updates containing a replacement key issued in 2023. IT organizations must prepare for a complex transition involving firmware updates through tools like fwupd, potential installation failures, and possible workarounds such as disabling Secure Boot, with success rates around 98-99% leaving millions of devices at risk of deployment failures.
Hacker News3 min read

A critical Microsoft Secure Boot certificate expires in September 2025, potentially preventing Linux installations on systems with Secure Boot enabled unless vendors push firmware updates containing a replacement key issued in 2023. IT organizations must prepare for a complex transition involving firmware updates through tools like fwupd, potential installation failures, and possible workarounds such as disabling Secure Boot, with success rates around 98-99% leaving millions of devices at risk of deployment failures.