PowerShell: Help to address the expiration of (Microsoft) Secure Boot certificates in June 2026

Because of "Windows Secure Boot certificate expiration and CA updates: Secure Boot certificates expire in June 2026".

Ready a PowerShell script to let each Service Unit's IT Helper (First Tier) help us to check colleauges' computer status, for addressing the expiration of Secure Boot certificates in June 2026.



Tested with the three brands - Dell, HP & Lenovo, to deploy UEFICA2023, found that HP was the most challenging one from the deployment steps.



References
Act now: Secure Boot certificates expire in June 2026, https://techcommunity.microsoft.com/blog/windows-itpro-blog/act-now-secure-boot-certificates-expire-in-june-2026/4426856

Dell: Microsoft 2011 Secure Boot Certificate Expiration, https://www.dell.com/support/kbdoc/en-hk/000347876/microsoft-2011-secure-boot-certificate-expiration

HP: Prepare for new Windows Secure Boot certificates, https://support.hp.com/us-en/document/ish_13070353-13070429-16

Lenovo: 2011 Microsoft Secure Boot Certificate Expiration, https://support.lenovo.com/us/en/solutions/ht518129



Update