Overview
- Microsoft updated its support page and Windows Message Center to say some Windows 11 updates may add a one‑time extra restart when the Secure Boot 2023 certificate is applied.
- The rollout widened with the April 2026 releases, including the April 30 optional update, and more devices will receive the change in upcoming patches.
- Users can check status in Windows Security under Device security, where green, yellow, or red icons show if the certificate is installed, pending, or needs action.
- User reports note two or even three restarts on some PCs, while Microsoft describes the expected behavior as a single additional reboot during installation.
- Older PCs without recent firmware or BIOS updates can fail the install and often need help from the device maker, with Windows Latest reporting thousands of such cases as the June 2026 cutoff nears.