New Secure Boot update resources for Azure Virtual Desktop, Windows 365, and Microsoft Intune

New documentation is now available to help IT administrators prepare for Secure Boot certificate updates and manage update readiness across virtual and cloud‑managed Windows environments. The documentation covers Secure Boot certificate updates for Azure Virtual Desktop and Windows 365 Cloud PCs, as well as monitoring Secure Boot certificate status using Microsoft Intune remediations to provide visibility into readiness across managed devices. Together, these resources help ensure virtual and cloud‑managed Windows environments remain secure and continue to receive updates after June 2026.

When will this happen

This documentation is available now. Secure Boot certificates begin expiring in June 2026.

How this will affect your organization

Organizations managing virtual or cloud‑managed Windows environments may need to review Secure Boot certificate update planning and readiness. The documentation provides guidance for updating Secure Boot certificates in Azure Virtual Desktop and Windows 365 environments and describes how Microsoft Intune can be used to monitor Secure Boot certificate status across managed devices.

In addition, the Secure Boot status report in Windows Autopatch is available again after being temporarily disabled, restoring visibility into Secure Boot readiness for devices enrolled in Windows Autopatch.

What you need to do to prepare

Review the new documentation to help plan Secure Boot certificate updates and assess readiness across your virtual and cloud‑managed Windows environments. Where applicable, use Microsoft Intune and Windows Autopatch reporting to monitor Secure Boot certificate status and support update planning.