Secure Boot certificate changes in 2026: Guidance for RHEL environments

This blog post discusses the expiration of Microsoft's 2011 Secure Boot signing certificate, set for June 26, 2026, and its implications for Red Hat Enterprise Linux (RHEL) environments. It assures users that existing systems will remain bootable post-expiration, but those who perform custom signing may need to take action. The post details recommended actions for RHEL administrators, including verifying secure boot settings and ensuring firmware and shim updates are in line with vendor guidance.