my computer certificate shows expired and no longer valid. How do i get a current certificate

The message about an expired Microsoft certificate is typically related to old or expiring security certificates on the system, not something that is manually “renewed” like a personal ID. For current Windows versions, Microsoft is already rolling out updated Secure Boot certificates through Windows Update to keep the device protected.

For home Windows devices, the way to get and keep current certificates is:

1. Make sure Windows Update is turned on and working.
   • Install all available security and quality updates for Windows.
2. Restart the PC after updates so any certificate and Secure Boot changes can be applied.
3. If the device supports Secure Boot and is relatively modern, the new 2023 Secure Boot certificates will be delivered automatically as part of these updates. No manual download of a “Microsoft certificate” is required.

If the device is very old and running an older Windows version, some legacy certificates may show as expired but are no longer used. The important action is to stay fully updated so the system has the new Secure Boot certificates that replace the expiring 2011 ones.

If there are still warnings after fully updating and restarting, and the device is managed by an organization, contact the organization’s IT support so they can review the Secure Boot and certificate configuration.

References:

• When Secure Boot certificates expire on Windows devices
• Windows devices for home users, businesses, and schools with Microsoft-managed updates
• Windows Secure Boot certificate expiration and CA updates