After the Microsoft UEFI CA 2011 certificate expires in 2026, computers with older graphics cards may stop booting when Secure Boot is enabled.
The problem will affect even the RTX 30 series cards. The thing is that each video card has a small piece of firmware in the VBIOS called GOP, and Secure Boot checks the certificate with which the GOP is signed before loading the system. Video cards released before 2023 are signed with this certificate, so after it expires, cards, including the RTX 30, may not work with Secure Boot.
Microsoft warns that devices without new certificates will not be able to receive security updates for pre-boot components, which will compromise the security of Windows boot. The BIOS will still be available, and users will be able to disable Secure Boot to boot the OS.
The problem will also affect AMD video cards, also signed with the 2011 certificate. The ideal solution would be for manufacturers such as Asus or MSI to release a new VBIOS with the current 2023 certificate.
Against this background, many games, including Valorant, Battlefield 6 and Black Ops 7, already require Secure Boot to be enabled, which complicates the lives of gamers and increases the risk of problems with outdated cards.
