NewApp Digest
search bot

legacy devices

Windows 11 Secure Boot is a messy ride on older PCs, and even Microsoft can't fix it
Winsage
July 19, 2026

Windows 11 Secure Boot is a messy ride on older PCs, and even Microsoft can’t fix it

Microsoft held an OEM Secure Boot Office Hours event with manufacturers like Acer, Asus, Dell, and HP to discuss issues related to the Windows 11 Secure Boot 2023 certificate rollout. Many IT administrators left with unresolved concerns, particularly regarding Secure Boot certificate errors. Participants reported persistent problems, including failures of suggested solutions from official documentation to apply to their hardware configurations. Ed Tittel shared his experience with compliance issues related to CA-2023 certificates, noting that ASUS motherboards sometimes required Secure Boot to be disabled temporarily, while MSI models exhibited erratic behavior. ASRock systems needed manual key resets, and documentation was lacking. Devices from Dell, HP, and Lenovo performed better but still faced staggered rollouts and required multiple reboots for BIOS updates. Specific issues raised included HP's BitLocker recovery loop persisting even with the latest BIOS, challenges with legacy device support from HP, devices showing Secure Boot Status as Unknown, and failures in updating the KEK on HP EliteBooks. Some questions from IT administrators regarding Dell and HP went unanswered during the session. The experiences highlighted a trend of Secure Boot issues across multiple OEMs, not limited to a single vendor. IT administrators are advised to pilot updates on representative hardware, back up BitLocker recovery keys, and consult OEM-specific advisories. The unresolved issues reflect common challenges faced by users, indicating that problems with Secure Boot certificate deployments are widespread across various manufacturers.
Microsoft tells crusty old kernel drivers to get with the Windows Hardware Compatibility Program
Winsage
March 27, 2026

Microsoft tells crusty old kernel drivers to get with the Windows Hardware Compatibility Program

Microsoft is enhancing the security of the Windows kernel by eliminating trust for kernel drivers not certified through the Windows Hardware Compatibility Program (WHCP) starting with the April 2026 Windows Update. This change specifically targets kernel drivers signed by the now-obsolete cross-signed root program, which has been associated with security vulnerabilities. The new policy will initially be introduced in an "evaluation mode" to monitor and audit driver loads for potential compatibility issues. Custom kernel drivers can still be used under the Application Control for Business policy, but must be signed by an authority within the device's Secure Boot Platform Key or Key Exchange Key variables. The changes will impact Windows 11 versions 24H2, 25H2, 26H1, and Windows Server 2025.
PC makers expected a faster Windows 11 surge, yet adoption lags far behind
Winsage
December 7, 2025

PC makers expected a faster Windows 11 surge, yet adoption lags far behind

Windows 10 powers over two in five active desktops globally, holding a 42.7% share, while Windows 11 has 53.7% of active Windows desktops as of November 2025. Many enterprises are delaying upgrades to Windows 11 by using Extended Security Updates due to reliance on legacy applications and equipment lacking driver support. Funding for large-scale computer replacements is often unallocated, with migration costs including compatibility testing, deployment planning, retraining, and workflow management. The adoption rate of Windows 11 is lagging behind previous cycles, with Dell executives noting double-digit margins in this delay. Many consumers continue using older Windows 10 machines for secondary tasks, prolonging their lifespan. In some European regions, consumers receive free security updates for Windows 10, reducing the urgency to upgrade. The growth of Windows 11 reflects net additions rather than outright replacements, as operational advantages over Windows 10 remain limited.
Search