WINDOWS UPDATE CONFIRMS SECURE BOOT PROTECTION

Microsoft’s April Patch Tuesday update introduces a new Secure Boot status indicator in Windows 10 and 11. The feature uses green, yellow, or red icons with detailed messages to confirm protection against bootkit malware, helping users ensure their PCs have the latest certificates before older ones expire in June.

Microsoft’s latest Patch Tuesday update introduces a crucial new feature: your PC can now confirm whether it is Secure Boot-protected. Beyond addressing multiple vulnerabilities, the update adds a visual indicator within Windows Security to show the status of Secure Boot certificates, ensuring users know if their devices are fully protected against bootkit malware.

Secure Boot is designed to defend Windows PCs from malicious software that targets the boot process. With older certificates expiring in June, Microsoft has been racing to roll out newer 2023 certificates. The update now provides clarity by displaying your Secure Boot status directly in Windows.

On Windows 11, users can navigate to Settings > Privacy & security > Windows Security > Device security, and scroll down to Secure Boot. On Windows 10, the path is Settings > Update & security > Windows Security > Device security. The Secure Boot icon will appear in one of three colours: green, yellow, or red. Green means protection is active with no recommended actions, yellow signals a pending safety recommendation, and red indicates urgent action is required.

Importantly, even a green icon may carry a cautionary message. For example, one test PC displayed a green icon but warned: “Secure Boot is on, but your device is using an older boot trust configuration that should be updated.” By contrast, a fully updated PC showed: “Secure Boot is on, and all required certificate updates have been applied.”

This new transparency ensures users can verify whether their system is genuinely secure, bridging the gap between technical updates and user awareness.