After the installation of the optional April 2026 update, users may notice their PCs restarting multiple times. This behavior is not a cause for concern, as it is a part of the update process, particularly when the Secure Boot certificate is refreshed. Such multiple reboots can also occur with future updates, as Microsoft continues to implement Secure Boot certificate refreshes across various devices.
Multiple restarts aren’t an issue
Typically, Windows updates require just a single reboot. However, multiple restarts are more frequently associated with significant feature updates or firmware and driver updates. In this instance, Windows 11 may reboot two or even three times during a standard update.
New Secure Boot certificates to blame
Many Windows devices manufactured prior to 2024 are equipped with outdated Secure Boot certificates, which necessitate updating to maintain the functionality of Windows’ Secure Boot security feature. These older certificates are set to expire in June 2026.
Microsoft commenced the rollout of updated Secure Boot certificates in March, but this process is staggered, meaning not all users will receive them simultaneously. If your Secure Boot certificates are refreshed during an update, your system may require an additional restart.
How to check your PC’s certificate status
In April 2026, Microsoft introduced a useful status indicator that allows users to verify whether their PC’s Secure Boot certificates are current. To access this indicator, follow these steps:
- Open Windows Security.
- Navigate to “Device security.”
- Check the “Secure Boot” section.
The status of your PC will be displayed using colored icons:
- Green: Everything is up to date, no action required.
- Yellow: Update pending, will be installed automatically.
- Red: Action required, installation could not be completed.
Important: A green icon signifies “all clear” only if it also indicates that all necessary Secure Boot certificates were successfully installed.
Older devices may run into issues
The process of refreshing Secure Boot certificates may not be seamless for all PCs. One key requirement is having up-to-date firmware or a compatible BIOS update. For older devices, such updates may no longer be available, leading to potential failures in the certificate refresh process.
In cases where Windows reports an error, it typically falls upon the device manufacturer to address the issue. Without the appropriate firmware support, resolving the problem may not be feasible through Microsoft.
No need to panic
If your PC experiences several restarts following a recent or upcoming Windows 11 update, there is no need for alarm. This behavior likely indicates that your Secure Boot certificates are being refreshed, and there is no underlying issue.
However, it is advisable to check whether the certificates were installed correctly after the update and reboots. This verification is essential to ensure that your system will continue to boot securely beyond June.
By the way: If you’re using Windows 11 Home, you might be missing out on the numerous advantages of Windows 11 Pro. To explore more, refer to our comparison of Windows 11 Home and Pro. If you’re considering an upgrade, you can find it at a discounted price in the PCWorld Software Store: now just instead of .
