Microsoft’s April Windows 11 update introduces notifications to alert users if Secure Boot certificates—critical to preventing malware at startup—are outdated ahead of their June 2026 expiry.