boot process

Winsage
June 4, 2026
Microsoft has announced updates to Secure Boot, enhancing system security by modifying support and registry keys to streamline the boot process. These updates aim to improve the security of Windows devices by ensuring that only trusted software is loaded during startup. Collaborations with Dell and STMicroelectronics are also underway to provide tailored support and integrate advanced security features into chipsets, respectively.
Winsage
May 28, 2026
A Secure Boot certificate refresh is being deployed across supported Windows devices via Windows Update. The Secure Boot certificates from 2011 will begin to expire in June 2026, prompting Microsoft to introduce new 2023-dated certificates to maintain security. Most users will require minimal action if their PCs are updated, but older devices may face challenges. The current certificates include: - Microsoft Corporation KEK CA 2011: expires June 24, 2026 - Microsoft UEFI CA 2011: expires June 27, 2026 - Microsoft Windows Production PCA 2011: expires October 19, 2026 The new certificates will remain valid until 2038, with plans for post-quantum cryptography around 2030. While PCs using the 2011 certificates will continue to function, they will lose access to new security protections, making them vulnerable to emerging threats. A notable example of such a threat is the BlackLotus bootkit, which exploited vulnerabilities to bypass Secure Boot. Microsoft's rollout strategy involves a staged update process that typically takes around 48 hours and may require restarts. Users are advised to keep Windows updated and check their Secure Boot status. Known issues may arise for older PCs, systems that bypassed Windows 11 requirements, Legacy BIOS systems, and custom firmware configurations. IT teams managing devices should inventory their systems, monitor specific event IDs, test updates, and document devices that cannot be updated.
Winsage
May 24, 2026
Windows Secure Boot is a feature of the Unified Extensible Firmware Interface (UEFI) specification that enhances system security by ensuring only trusted software is loaded during the startup sequence. It verifies the digital signatures of boot components to protect against malicious software and unauthorized access. Key aspects include enhanced security by preventing untrusted code execution, compatibility with various hardware and software configurations, and user control over Secure Boot settings for customization.
AppWizard
May 23, 2026
A retro PC enthusiast modified the VBIOS of an S3 ViRGE DX graphics card to include a version of the classic game Snake, allowing users to play it briefly during system boot. This project, by the YouTube channel Bits und Bolts, involved embedding Snake 512, a compact game written in x86 assembly language. The modification includes a dynamic text splash screen displaying the GPU's operating frequency and prompts users to play Snake or skip to the boot process. The implementation does not support USB keyboards and has no sound during gameplay. The enthusiast also customized the game's colors using hexadecimal values from the VGA color palette.
Winsage
May 5, 2026
Upon installing the April 2026 Patch Tuesday update, some users experienced two or three reboots, which Microsoft confirmed is intentional due to the installation of Secure Boot 2023 certificates. This behavior is expected for a limited number of devices and is part of the Secure Boot update process. The Secure Boot certificates are replacing older ones issued in 2011, set to expire in June 2026. Users can check their Secure Boot status in the Windows Security app, which indicates the status with green, yellow, or red badges. A green badge means the system is up to date, while yellow and red badges indicate issues with certificate updates. Microsoft is managing Secure Boot certificates on modern PCs, but older machines without OEM support may struggle to receive updates due to firmware limitations.
Winsage
April 9, 2026
Many newer PCs support a feature called Modern Standby, which allows minimal background processes to continue running during sleep mode, leading to quicker wake-up times but potentially less efficient battery preservation. PCs can operate in one of six states, with S0 indicating full operation and S5 indicating a complete shutdown. Modern Standby (S0 Low Power Idle) turns off the display and most core components while allowing limited background activity, which may vary in effectiveness for battery drain. Traditional Sleep (S3) shuts down the screen and main components but may take longer to resume. Hibernate (S4) saves the current session and powers off completely, while Restart clears memory and resets the operating system. Shut Down (S5) clears memory and terminates processes, using a "soft off" method that retains certain settings for quicker startups through fast boot. Disabling fast boot can be done via the Control Panel. Although Modern Standby can conserve battery, it may not always be effective, as issues with firmware or drivers can prevent the computer from entering a true low-power state. For maximum battery efficiency, using the Shut Down option is recommended, especially with fast boot enabled for quick startups.
AppWizard
April 1, 2026
The video by PortalRunner explores alternatives for running modern software in environments with limited RAM, particularly in the context of the challenges posed by the absence of DDR5 memory. It discusses various strategies, including: - Testing Linux with specific boot arguments, which can lead to system failures if insufficient RAM is allocated. - Maximizing swap usage on SSDs, which, despite being faster than HDDs, results in sluggish performance due to overhead. - Utilizing video RAM from GPUs as a substitute for system RAM, which also suffers from significant overhead. - Modifying a CoreBoot BIOS image to use CPU cache memory, allowing lightweight software to run without system RAM, although this method raises scalability and practicality concerns. The exploration highlights creative responses to RAM shortages in computing.
Winsage
March 12, 2026
In March, Microsoft released cumulative security updates for Windows 10 and Windows 11, with support for certain versions continuing until March 2026. The updates include KB5079466 for Windows 11 version 26H1, KB5079473 for versions 24H2 and 25H2, KB5078883 for version 23H2, and KB5078885 for Windows 10 version 22H2. These updates will be distributed via Windows Update, the Microsoft Update Catalog, and WSUS for enterprise environments. This month, Microsoft combined the Servicing Stack Update (SSU) with the Latest Cumulative Update, simplifying the update process. Key enhancements include improvements to Secure Boot, with expanded device target data for new certificates, and security enhancements for Explorer’s search functionality in Windows 11 versions 24H2 and 25H2. A fix for Windows Defender Application Control (WDAC) was also implemented, addressing issues with COM objects under certain policy configurations. The Windows System Image Manager received a new warning dialog for confirming the trustworthiness of catalog files, which is important for enterprise environments. Updates for Windows 10 22H2, despite its end-of-life status, included fixes for secure boot issues and improvements for file version history in the Control Panel. An SSU for Windows 11 (KB5077869) was also released to maintain update stability. Microsoft's updates scheduled for March 2026 will address vulnerabilities in components like the Windows App Installer, SQL Server, and Microsoft Office. The Security Update Guide provides detailed information on specific vulnerabilities and affected components.
Search