[$] Secure Boot certificate expiration is here
Linux users who have Secure Boot enabled ontheir systems rely on certificates issued by Microsoft to verify the softwareused to boot a system is trusted by the user. One of those certificates expiredrecently, but that will not cause systems that are able to boot to stop doingso. There are situations where the expiration may cause problems, however, andthe window for relying on existing signed binaries is shorter than it mightappear. Users and administrators will want to stay on top of these changes. Overthe last year, part of my job at Microsoft has been to work on thisproblem. LWN wrote about thecertificate expiration in July 2025, and this article follows up with wherewe are now.