None

String added in the repository
Otherwise, Tails will no longer start on this computer after a future Tails upgrade. We cannot predict when such an upgrade will occur, because the timing depends on changes that Tails could inherit from Debian in any Tails upgrade.
 
yesterday
None

String added in the repository
[[!img support/known_issues/secure_boot_certificates/secure_boot_update_needed.png class="screenshot" alt="Notification: Secure Boot Update Needed"]]
 
yesterday
None

String added in the repository
If the **Secure Boot Update Needed** notification below appears when starting Tails, it means that the Secure Boot certificates of this computer need to be updated.
 
yesterday
None

String added in the repository
[[!toc startlevel=2]]
 
yesterday
None

String added in the repository
[[!meta title="Secure Boot certificates update"]]
 
yesterday
None

Resource updated
File “wiki/src/support/known_issues/secure_boot_certificates.zh.po” was added. yesterday
None

String added in the repository
In the BIOS menu, find the **Secure Boot** setting and disable it. This option is usually in either the **Security** tab, the **Boot** tab, or the **Authentication** tab.
 
yesterday
None

String added in the repository
You can usually disable Secure Boot through the BIOS settings of the computer, but the procedure varies by manufacturer. To learn how to edit the BIOS settings, search for the user manual of the computer on the support website of the manufacturer.
 
yesterday
None

String added in the repository
Instead of updating the certificate, you can also disable Secure Boot. Even with Secure Boot disabled, the regular operating system should still start.
 
yesterday
None

String added in the repository
If the **Secure Boot Update Needed** notification persists when restarting Tails, it means that the Secure Boot certificates of the computer are still outdated.
 
yesterday
None

String added in the repository
Disabling Secure Boot
 
yesterday
None

String added in the repository
Linux distributions that use the GNOME desktop automatically apply this
update through GNOME Software.
 
yesterday
None

String added in the repository
For Linux, such updates are applied by the [[!wikipedia fwupd]] daemon.
 
yesterday
None

String added in the repository
See also [[Microsoft: Install Windows
updates|https://support.microsoft.com/en-us/windows/install-windows-updates-3c5ae7fc-9fb6-9af1-1984-b5e0412c556a]].
 
yesterday
None

String added in the repository
For Windows, select **Start ▸ Settings ▸ Windows Update ▸ Check for Windows updates**.
 
yesterday
None

String added in the repository
To update the Secure Boot certificates of the computer, restart its regular operating system, Windows or Linux, and apply all available updates.
 
yesterday
None

String added in the repository
Updating the Secure Boot certificates
 
yesterday
None

String added in the repository
Tails has detected that the computer still has outdated Secure Boot certificates and needs an update.
 
yesterday
None

String added in the repository
Since 2023, [[Microsoft has started replacing|https://support.microsoft.com/en-us/topic/windows-secure-boot-certificate-expiration-and-ca-updates-7ff40d33-95dc-4c3c-8725-a9b95457578e]] the Secure Boot certificates originally issued in 2011. These older certificates begin expiring in June 2026.
 
yesterday
None

String added in the repository
[[!wikipedia Secure Boot]] is a security measure that prevents starting malicious operating systems on a computer. Most computers running Windows have Secure Boot enabled. Linux distributions, including Tails, also support Secure Boot.
 
yesterday

Search