Summary created by Smart Answers AI
In summary:
- PCWorld reports that Windows 11 PCs may restart multiple times after recent updates due to Secure Boot certificate refreshes being rolled out by Microsoft.
- These multiple reboots are normal behavior and not indicative of PC problems, unlike typical Windows updates that require only one restart.
- Users can verify their certificate status through Windows Security under Device security and Secure Boot, where green icons confirm proper installation for continued system security.
Some Windows 11 users are reporting unusual behavior following recent updates. During installation of the optional April 2026 update, their PCs restart not just once but several times, giving the impression that there’s an error or issue with the system.
However, Microsoft explains via a message in the Windows Message Center that this behavior is intended in certain cases.
Multiple restarts aren’t an issue
After installing the optional April 2026 update, your PC may restart more than once if your PC’s Secure Boot certificate is refreshed as part of the update. This may also happen with future updates, as Microsoft is still rolling out Secure Boot certificate refreshes to PCs.
Normally, Windows updates only require a single reboot. Multiple reboots are otherwise more commonly associated with major feature updates or firmware and driver updates. Here, Windows 11 may reboot twice or even three times even during a regular update.
New Secure Boot certificates to blame
Most Windows devices manufactured before 2024 have outdated Secure Boot certificates, which need to be updated in order for Windows’ Secure Boot security feature to keep working. Those older certificates will expire come June 2026.
Microsoft began rolling out updated Secure Boot certificates to PCs back in March, but it’s a staggered rollout and not everyone has gotten them yet. If your Secure Boot certificates are refreshed by an update, your system may need to restart an additional time.
How to check your PC’s certificate status
In April 2026, Microsoft rolled out a nifty status indicator that shows whether your PC’s Secure Boot certificates are up-to-date. You can view this indicator with these steps:
- Open Windows Security.
- Navigate to “Device security.”
- Check the “Secure Boot” section.
Windows displays your PC’s status using colored icons:
- Green: Everything is up to date, no action required.
- Yellow: Update pending, will be installed automatically.
- Red: Action required, installation could not be completed.
Important: A green icon only means “all clear” if it also indicates that all required Secure Boot certificates were successfully installed.
Older devices may run into issues
The Secure Boot certificate refresh isn’t painless for all PCs. One prerequisite is up-to-date firmware or a suitable BIOS update. With older devices, it may be the case that such updates are no longer available, which means the certificate refreshes may fail.
If Windows reports an error here, it’s usually up to the device manufacturer to resolve it. Without the appropriate firmware support, the problem often can’t be solved by Microsoft.
No need to panic
If your PC restarts several times after a recent or upcoming Windows 11 update, don’t be alarmed. You’re probably getting your Secure Boot certificates refreshed and there isn’t actually a problem.
However, after the update and reboots, you should check whether the certificates were installed correctly. This is the only way to ensure that your system will continue to start up securely past June.
By the way: If you’re using Windows 11 Home, you’re missing out on the many benefits of Windows 11 Pro. To learn more, see our comparison of Windows 11 Home and Pro. If you want to upgrade, snag it for cheap in the PCWorld Software Store: now just $59 instead of $99.
This article originally appeared on our sister publication PC-WELT and was translated and localized from German.