None

String added in the repository
Why is this happening?
 
04/23/2026
None

String added in the repository
After this change in Tails occurs, the computer might display a **Secure Boot Violation** error or another error message when trying to start Tails.
 
04/23/2026
None

String added in the repository
Otherwise, Tails will no longer start on this computer after a future Tails upgrade. We cannot predict when such an upgrade will occur, because the timing depends on changes that Tails could inherit from Debian in any Tails upgrade.
 
04/23/2026
None

String added in the repository
[[!img support/known_issues/secure_boot_certificates/secure_boot_update_needed.png class="screenshot" alt="Notification: Secure Boot Update Needed"]]
 
04/23/2026
None

String added in the repository
If the **Secure Boot Update Needed** notification below appears when starting Tails, it means that the Secure Boot certificates of this computer need to be updated.
 
04/23/2026
None

String added in the repository
[[!toc startlevel=2]]
 
04/23/2026
None

String added in the repository
[[!meta title="Secure Boot certificates update"]]
 
04/23/2026
None

Source string added
In the BIOS menu, find the **Secure Boot** setting and disable it. This option is usually in either the **Security** tab, the **Boot** tab, or the **Authentication** tab.
04/23/2026
None

Source string added
You can usually disable Secure Boot through the BIOS settings of the computer, but the procedure varies by manufacturer. To learn how to edit the BIOS settings, search for the user manual of the computer on the support website of the manufacturer.
04/23/2026
None

Source string added
Instead of updating the certificate, you can also disable Secure Boot. Even with Secure Boot disabled, the regular operating system should still start.
04/23/2026
None

Source string added
If the **Secure Boot Update Needed** notification persists when restarting Tails, it means that the Secure Boot certificates of the computer are still outdated.
04/23/2026
None

Source string added
Disabling Secure Boot
04/23/2026
None

Source string added
Linux distributions that use the GNOME desktop automatically apply this
update through GNOME Software.
04/23/2026
None

Source string added
For Linux, such updates are applied by the [[!wikipedia fwupd]] daemon.
04/23/2026
None

Source string added
See also [[Microsoft: Install Windows
updates|https://support.microsoft.com/en-us/windows/install-windows-updates-3c5ae7fc-9fb6-9af1-1984-b5e0412c556a]].
04/23/2026
None

Source string added
For Windows, select **Start ▸ Settings ▸ Windows Update ▸ Check for Windows updates**.
04/23/2026
None

Source string added
To update the Secure Boot certificates of the computer, restart its regular operating system, Windows or Linux, and apply all available updates.
04/23/2026
None

Source string added
Updating the Secure Boot certificates
04/23/2026
None

Source string added
Tails has detected that the computer still has outdated Secure Boot certificates and needs an update.
04/23/2026
None

Source string added
Since 2023, [[Microsoft has started replacing|https://support.microsoft.com/en-us/topic/windows-secure-boot-certificate-expiration-and-ca-updates-7ff40d33-95dc-4c3c-8725-a9b95457578e]] the Secure Boot certificates originally issued in 2011. These older certificates begin expiring in June 2026.
04/23/2026

Search