Omanghana
Microsoft is rolling out one of the biggest changes to the Windows update system in more than 15 years, aiming to reduce long-standing complaints about unexpected restarts and disruptive software installations. The overhaul comes as the company prepares devices for a critical security transition tied to expiring Secure Boot certificates.
At the center of the update is a new “One-Time Restart” process designed to manage the migration to Secure Boot 2023 certificates. Microsoft says the original certificates issued in 2011 are scheduled to expire in June 2026, making the replacement necessary to ensure Windows devices can continue verifying trusted boot software and maintaining firmware security.
The company is also introducing broader improvements to how Windows 11 handles routine maintenance updates. Under the new system, operating system updates, driver patches, and firmware installations are expected to be consolidated into a single monthly restart event, reducing the number of interruptions users experience throughout the month.
Users will also gain greater control over update scheduling. Microsoft is expanding the ability to delay updates by repeatedly extending the existing 35-day pause option, effectively allowing indefinite postponement for those who prefer to manage installations manually.
Another major change involves separating power controls from forced updates. Windows users will soon be able to choose “Restart” or “Shut Down” without automatically triggering pending update installations, a feature that has been widely requested for years.
To improve visibility around device protection, the Windows Security application will now display clearer health indicators related to Secure Boot updates. Systems requiring user attention will show prominent warnings, including red alerts for critical actions.
Although some users have reported experiencing up to three restarts during the certificate transition, Microsoft says the multiple reboot process is intentional and required to safely complete firmware-level security updates.
Source: Omanghana
