This guide is for anyone who assembled their own desktop, or had a local shop assemble one from separate parts, and wants to know whether the 19 October Secure Boot date affects it. Branded PCs get their updates from one company; a self-built PC depends on Windows and on your motherboard maker. You will learn what to check, in what order, and what to leave alone.
Does the 19 October Secure Boot date affect a PC I built myself?
Short answer: It can, in the same way as any other Windows PC. Secure Boot (a start-up safety check that lets only trusted software load before Windows) uses certificates, which are like ID cards with expiry dates. Microsoft's Windows Production PCA 2011 expires on 19 October 2026. On a self-built PC, check Secure Boot, check your BIOS version and save your BitLocker key.
What exactly expires, and when?
Microsoft issued a set of Secure Boot certificates in 2011 and is replacing them with 2023 versions. Microsoft explains this in its support article on Secure Boot certificate updates.
What an expired certificate does on a particular PC depends on the machine, so this post sticks to what to check and how to avoid self-inflicted problems.
Why a self-built PC needs a little extra attention
In a branded desktop, one company tests the BIOS (the small program that starts the computer before Windows loads) together with the Windows updates. In a custom build, the board, the BIOS version and the Windows install may all come from different places. Some owners bought a board years ago and never opened the BIOS screen again. Microsoft's own rollout is described for Windows devices generally, and we do not know how every board model handles it. Your motherboard maker's support page is the place to look for notes on Secure Boot or a newer BIOS for your exact model.
What to check, in order
1. Is Secure Boot on?
Press the Windows key and R, type msinfo32 and press Enter. Read BIOS Mode (should be UEFI) and Secure Boot State (should be On). If it says Off, some home builders switched it off during installation and never turned it back on. Do not change this yet; read the help section below first.
2. Which BIOS version do you have?
The same msinfo32 page shows BIOS Version and its date. Note them down. Then search your motherboard model on the maker's website and look at the BIOS downloads. Read the release notes before deciding to update. Our guide to updating a BIOS safely applies to desktop boards as well. Do not switch the PC off or press reset while a BIOS update is running.
3. Let Windows Update run
Open Settings, Windows Update and check for updates. Restart when asked. Microsoft delivers the replacement certificates through Windows, so keeping the PC up to date is the first step.
4. Save the BitLocker key
BitLocker (Windows' built-in drive lock) asks for a 48-digit recovery key when it notices a start-up change. Microsoft lists a recovery prompt as a known case after the replacement certificates arrive on some PCs. Look in Settings, Privacy and security, Device encryption (the wording can differ between versions), or sign in to your Microsoft account on a phone. Never clear the BIOS settings or turn Secure Boot off without the key in hand. If you are already locked out, see BitLocker without a key in India.
Things that are different on a build with older parts
- If your board has not had a BIOS update for years, the maker may no longer publish one. Ask the maker rather than using a file from a forum.
- If you dual-boot another operating system or use a custom boot tool, ask before changing anything in the Secure Boot settings.
- If the BIOS was reset (for example after a dead CMOS battery, the small coin cell that remembers settings), re-check Secure Boot afterwards.
Power cuts, dust and updating a desktop
Voltage dips and power cuts are the main danger during any BIOS or Windows update, so plug a desktop into a UPS (a small battery backup) first. A cut at the wrong moment can leave a board that will not start. Dust in an old tower can also cause random restarts that look like update problems, so a clean-up helps. We accept desktops by courier from anywhere in India.
When to get help
- A BitLocker recovery screen appears and you do not have the key.
- A BIOS update was interrupted by a power cut or restart.
- Secure Boot shows Off and you never changed it.
- The PC restarts repeatedly and never reaches Windows.
Our desktop repair service handles these cases, and any quote comes after diagnosis, shared for your approval first. In Hyderabad we visit through our doorstep service, with ₹149 doorstep visit fee, waived when you approve laptop repair with us.
A note from the LRW Engineer Team
If your PC starts and runs normally, the safest plan is a quiet one: key saved, Windows Update running, BIOS version noted. Resist the urge to flash a BIOS only because a headline said so. Update it when your board maker recommends it, with the PC on a UPS and no other work open.