Microsoft confirms the brand new Safe Boot folder in Home windows 11 is not a malicious program, you do not wish to delete it

secure boot 2023 folder in windows 11.jpg


Secure Boot 2023 folder in Windows 11

Microsoft informed Home windows Newest that the brand new “SecureBoot” folder created by way of Home windows 11’s Would possibly 2026 Replace (KB5089549) is anticipated conduct for Safe Boot certificate replace and no longer a recognized factor. If you happen to see the folder within C:Home windows, you don’t must delete it, however why is it being created within the first position?

SecureBoot folder in Windows 11 C drive

In June 2026, Safe Boot certificate issued in 2011 or previous will robotically expire, because of this the older certificate wish to get replaced quicker relatively than later.

For the ones unaware, Safe Boot certificate are vital for Safe Boot to paintings successfully. Safe Boot is a UEFI firmware characteristic required by way of Home windows 11. It’s became on by way of default on all trendy PCs, and it blocks unauthorized tool, in particular malware, from loading right through startup or boot.

Secure Boot state

Safe Boot 2023 certificate will change all older certificate, and maximum of you don’t must take any motion if in case you have a appropriate firmware model. Actually, Microsoft says Safe Boot certificate will robotically replace by means of Home windows Replace whilst you set up per 30 days cumulative updates and reboot your PC a couple of times to complete making use of the adjustments.

Secure Boot Allowed Key Exchange Key (KEK) Update

Now, forward of the closing date, Microsoft is quietly including a brand new “SecureBoot” folder below C:Home windows on eligible gadgets to allow clean set up of the certificate. This chang is rolling out with Home windows 11 KB5089549 (Would possibly 2026 Replace).

Within the unlock notes, Microsoft by no means discussed that it was once including a brand new folder for Safe Boot certificate, however after customers spotted the unusual new folder, the corporate in any case up to date the documentation with rationalization.

“This replace provides a brand new SecureBoot folder below C:Home windows on eligible gadgets. The folder incorporates instance scripts meant for organizations with IT execs who actively organize updates throughout their software fleet,” Microsoft famous in an up to date reinforce file noticed by way of Home windows Newest.

In principle, this folder is supposed for IT admins or enterprises, however it’s being rolled out to everybody, together with those that use Home windows 11 House. The “SecureBoot” folder confirmed up on all my PCs, together with my check digital machines the place Safe Boot 2023 certificate are already carried out.

What does the brand new “SecureBoot” folder within C:Home windows comprise, and must you delete it?

The brand new SecureBoot folder incorporates seven PowerShell scripts that Microsoft constructed for IT admins, and none of them in truth alternate anything else to your PC on their very own.

One script (Stumble on-SecureBootCertUpdateStatus.ps1) exams whether or not the brand new 2023 certificate are put in and saves the end result as a JSON document, and some other (Permit-SecureBootUpdateTask.ps1) makes positive the integrated Home windows scheduled job that in truth applies the certificate is became on.

Scripts in SecureBoot folder in Windows

Thankfully, there’s not anything it’s important to do about those scripts or the SecureBoot folder itself. I’d depart them untouched, as a long run Home windows replace may both require it or take away the folder solely when it’s no longer wanted.

Microsoft says Safe Boot 2023 is extensively rolling out and you’ll be able to test the standing by means of Home windows Safety

In some other replace to its reinforce file, Microsoft showed that Safe Boot certificate are actually extensively rolling out and are integrated with cumulative updates.

That implies, in the event you haven’t gained it but, chances are you’ll get it with Home windows 11’s Would possibly 2026 Replace, however needless to say no longer all PCs may have get right of entry to to the more recent certificate.

In our exams, Home windows Newest discovered that Safe Boot certificate are quietly failing throughout hundreds of PCs because of out of date firmware. It’s unclear if Microsoft has any plans to step in, however I doubt that will occur, because the Home windows Safety app already exposes the present standing.

If you happen to open Home windows Safety, pass to Software Safety, and scroll to “Safe Boot,” you’ll both have a inexperienced, yellow, or purple alert. If it’s inexperienced, it approach Safe Boot is operating appropriately and the certificates is carried out.

Secure Boot certificate status in Windows 11

With regards to yellow, chances are you’ll wish to take motion, comparable to updating firmware to get the more recent certificate, and purple approach your software would possibly by no means obtain the certificates.

The Secure Boot section showing the “Requires action” status with a red stop icon.
The Safe Boot phase appearing the “Calls for motion” standing with a purple prevent icon.

What about you? Do you have got the Safe Boot 2023 certificate?


Leave a Comment

Your email address will not be published. Required fields are marked *