None

String added in the repository
Instead of updating the certificate, you can also disable Secure Boot. Even with Secure Boot disabled, the regular operating system should still start.
 
04/23/2026
None

String added in the repository
If the **Secure Boot Update Needed** notification persists when restarting Tails, it means that the Secure Boot certificates of the computer are still outdated.
 
04/23/2026
None

String added in the repository
Disabling Secure Boot
 
04/23/2026
None

String added in the repository
Linux distributions that use the GNOME desktop automatically apply this
update through GNOME Software.
 
04/23/2026
None

String added in the repository
For Linux, such updates are applied by the [[!wikipedia fwupd]] daemon.
 
04/23/2026
None

String added in the repository
See also [[Microsoft: Install Windows
updates|https://support.microsoft.com/en-us/windows/install-windows-updates-3c5ae7fc-9fb6-9af1-1984-b5e0412c556a]].
 
04/23/2026
None

String added in the repository
For Windows, select **Start ▸ Settings ▸ Windows Update ▸ Check for Windows updates**.
 
04/23/2026
None

String added in the repository
To update the Secure Boot certificates of the computer, restart its regular operating system, Windows or Linux, and apply all available updates.
 
04/23/2026
None

String added in the repository
Updating the Secure Boot certificates
 
04/23/2026
None

String added in the repository
Tails has detected that the computer still has outdated Secure Boot certificates and needs an update.
 
04/23/2026
None

String added in the repository
Since 2023, [[Microsoft has started replacing|https://support.microsoft.com/en-us/topic/windows-secure-boot-certificate-expiration-and-ca-updates-7ff40d33-95dc-4c3c-8725-a9b95457578e]] the Secure Boot certificates originally issued in 2011. These older certificates begin expiring in June 2026.
 
04/23/2026
None

String added in the repository
[[!wikipedia Secure Boot]] is a security measure that prevents starting malicious operating systems on a computer. Most computers running Windows have Secure Boot enabled. Linux distributions, including Tails, also support Secure Boot.
 
04/23/2026
None

String added in the repository
Why is this happening?
 
04/23/2026
None

String added in the repository
After this change in Tails occurs, the computer might display a **Secure Boot Violation** error or another error message when trying to start Tails.
 
04/23/2026
None

String added in the repository
Otherwise, Tails will no longer start on this computer after a future Tails upgrade. We cannot predict when such an upgrade will occur, because the timing depends on changes that Tails could inherit from Debian in any Tails upgrade.
 
04/23/2026
None

String added in the repository
[[!img support/known_issues/secure_boot_certificates/secure_boot_update_needed.png class="screenshot" alt="Notification: Secure Boot Update Needed"]]
 
04/23/2026
None

String added in the repository
If the **Secure Boot Update Needed** notification below appears when starting Tails, it means that the Secure Boot certificates of this computer need to be updated.
 
04/23/2026
None

String added in the repository
[[!toc startlevel=2]]
 
04/23/2026
None

String added in the repository
[[!meta title="Secure Boot certificates update"]]
 
04/23/2026
None

Resource updated
The “wiki/src/install/inc/overview.ru.po” file was changed. 04/10/2026

Search