firmware update

Winsage
March 6, 2026
Every Secure Boot-enabled Windows PC relies on cryptographic certificates issued by Microsoft in 2011 for boot process integrity. The first of these certificates will expire on June 24, 2026, impacting the ability to receive future security updates. Microsoft is rolling out replacement certificates through Windows Update, requiring collaboration between Microsoft, PC manufacturers, and users. Three critical certificates will expire: the Microsoft Corporation KEK CA 2011 and Microsoft UEFI CA 2011 in June 2026, and the Microsoft Windows Production PCA 2011 in October 2026. The new certificates introduced in 2023 have a restructured functionality to enhance security. Not all PCs are affected; newer devices manufactured since 2024 come with the new certificates. Windows 10 users face challenges as support ends in October 2025, and unsupported devices will not receive updates. Home users should ensure automatic Windows updates and check for firmware updates, while enterprise environments must verify firmware updates before applying certificate updates. The first certificate expiration is on June 27, 2026.
Winsage
February 24, 2026
Microsoft has released a firmware update for the Surface Pro (11th Gen) in February, focusing on enhancing connectivity and device reliability. Key improvements include enhanced security to address vulnerabilities, uninterrupted VPN usage by fixing cellular connectivity issues, consistent cellular settings, improved video conferencing during Microsoft Teams calls, resolved compatibility issues with Surface Dock 2, and a fix for Dolby Vision video playback errors. Additionally, Microsoft is collaborating with Ericsson to enhance 5G connectivity for Surface Pro users, which will include features like automatic eSIM switching and remote policy management. Future 5G bundles will include Microsoft 365, Intune, and Ericsson Enterprise 5G Connect, available with Surface Copilot+ PCs.
Winsage
February 13, 2026
Microsoft is refreshing Secure Boot certificates across its Windows ecosystem ahead of their expiration in June 2026 to enhance firmware-level security. Most systems will automatically receive the new certificates via Windows Update, while older or specialized devices may require firmware updates from the original equipment manufacturer (OEM). Devices that do not receive the update will still boot but will gradually lose access to critical boot-level mitigations and future compatibility improvements. The deployment of the new certificates has started with regular monthly Windows updates and applies to home users, businesses, and educational institutions. Organizations can manage updates independently using tools like Group Policy. Many devices produced since 2024 and nearly all systems shipped in 2025 already have the updated certificates. If systems are not updated, they will continue to function but will enter a degraded security state, unable to adopt new Secure Boot mitigations. This could increase exposure to threats and lead to compatibility issues with newer operating systems and software. IT administrators should ensure that Windows Update is deploying the latest updates and that device firmware is current, especially for older hardware or specialized systems.
Winsage
February 11, 2026
Secure Boot is a security feature in Windows and Windows Server that protects devices from untrusted software at startup. It has been in operation since 2011 and relies on certificates embedded in a PC’s firmware. The original Secure Boot certificates will begin to expire in late June 2026. New certificates are being rolled out through regular Windows updates for supported devices, with OEMs preparing new devices with updated certificates since 2024. If devices do not receive the new certificates before the expiration of the old ones, they will continue to function but will enter a degraded security state, limiting future protections. Users generally do not need to take action, as updates will be installed automatically, but some specialized systems may require separate firmware updates. Organizations can monitor the update status through the Windows Security App and should ensure devices are running the latest updates and firmware. Support is available for individuals and organizations facing issues during the update process.
Winsage
February 10, 2026
Microsoft is enhancing the security of Windows devices by replacing boot-level security certificates that are nearing expiration, with this initiative integrated into regular Windows platform updates. The original Secure Boot certificates from 2011 will expire between June and October 2026, prompting Microsoft to issue new certificates in 2023, which are included in many new Windows devices sold since 2024. Older hardware will require updates to remain compliant. Devices with expired certificates will continue to operate but will enter a "degraded security state," potentially hindering future updates and causing compatibility issues. The new Secure Boot certificates rollout began with the Windows 11 KB5074109 update. Most Windows 11 users will have the new certificates installed automatically, while specialized systems may have different update protocols. Windows 10 users must enroll in Microsoft’s Extended Security Updates to receive the new certificates.
Winsage
September 9, 2025
Windows 11 users who installed the August 2025 KB5063878 update have reported issues with SSDs disappearing from File Explorer and BIOS. Investigations suggest that the problem is linked to preliminary firmware versions of certain SSDs being inadvertently activated by the update. Phison technicians confirmed that the affected SSDs were running on this unfinished firmware, which was not intended for consumer use. Users are advised to update their firmware and back up data to prevent potential loss.
AppWizard
July 6, 2025
OnePlus has started rolling out a firmware update for the OnePlus 13 in the U.S., identified by build number CPH2655_15.0.0.832(EX01), with a size of 7.47GB. The update includes the June Android security patch and introduces several new features: remote control support for Windows PCs, a Game Camera for live screenshots and recording during gameplay, a Speaker Cleaner for audio performance, a Drag & Drop feature for third-party apps, and a "reduce white points" option for color sensitivity. Additionally, it brings system-wide improvements such as enhanced app management in Settings, improved responsiveness of floating windows, smoother animations, stacked notifications summary, better color consistency for navigation and app icons, and optimized background app support. A similar update is also being rolled out to the OnePlus 13R.
Winsage
June 21, 2025
A recent update to Windows 11 version 24H2, released in October 2024, has caused installation issues for users of Western Digital SSDs, particularly the WD SN770 model. Users encounter a compatibility message stating their hardware isn't ready for the new version. Possible solutions include reverting to a Windows 10 image, switching to Linux, or updating the SSD's firmware using the SanDisk Dashboard, which may help pass the Windows hardware scan. While Linux offers fewer hardware restrictions, it may present challenges with application compatibility.
Winsage
June 20, 2025
Microsoft is blocking users of WD Black SN770 solid-state drives from receiving the Windows 11 version 24H2 update due to an issue that has not been officially acknowledged. Users attempting to upgrade receive an alert indicating their hardware is not ready. Some users have found a workaround by manually applying firmware updates using the SanDisk Dashboard software, which is necessary for managing firmware updates for various SSD models. Western Digital's recent corporate restructuring has added complexity to support for these drives. Until Microsoft automates the firmware update process, users must use the SanDisk Dashboard to update their firmware and proceed with the Windows 11 upgrade.
Search