Secure Boot certificates expire in June 2026

Perhaps if you can enlighten us

Does the Apple Secure Boot Process use " The Microsoft certificates used in Secure Boot process ?

Answer - No

Suggest reading these articles from Apple regarding Secure Boot on Apple Computers

About Startup Security Utility on a Mac with the Apple T2 Security Chip - Apple Support

Use macOS Recovery on a Mac with Apple silicon

1. Select one of the following security options:

• • Full Security: Ensures that only your current OS, or signed operating system software currently trusted by Apple, can run. This mode requires a network connection at software installation time.
  • Reduced Security: Allows any version of signed operating system software ever trusted by Apple to run.

1. If you selected Reduced Security, select any of the following options, if needed:

• • Allow user management of kernel extensions from identified developers: Allow installation of software that uses legacy kernel extensions.
  • Allow remote management of kernel extensions and automatic software updates: Authorize remote management of legacy kernel extensions and software updates using a mobile device management (MDM) solution.

1. Click OK.
2. If you changed the security policy, click the User pop-up menu, choose an administrator account, enter the password for the administrator account, then click OK.
3. Choose Apple menu  > Restart.
4. You must restart your Mac for the changes to take effect.

bw_mdm wrote:

Regarding on the article from Microsoft Support (Act now: Secure Boot certificates expire in June 2026 - Windows IT Pro Blog), the current secure boot certificates will be expire in June 2026, which will also affect MacOS. Our company is currently using MacOS devices using MacOS 12, 13, 14 & 15. I would like to know how will the expiry affect our company's devices and what action should we take to prevent any impact.

It probably won't affect your company's computers at all.

All security certificates have an expiry date. You really don't need to worry about it. Here's a reminder from the last time the social media fear-mongers tried to make a crises out of this. I've never understood why social media influencers don't take down their old posts. The same story that stokes fear and paranoia always looks silly in hindsight. But oh, well.

It's always a good idea to stay reasonably up-to-date. Personally, I'm a big fan of making my own decisions in this regard. I'm currently using Sequoia because it provided stable and reliable. I did not use Sonoma for the opposite reason. While I was very happy with Monterey, I had some external requirements that forced me to move to Ventura. I would consider Ventura to be the oldest reasonable version these days. I would still be using it if I had the choice.

https://learn.microsoft.com/en-us/windows/security/hardware-security/tpm/trusted-platform-module-overview