Older NVIDIA GPU Might Not Boot Properly With Secure Boot After June 2026

Posted on Edited on

Quick Report

A major issue is set to affect older NVIDIA GPUs starting June 2026: the Microsoft UEFI CA 2011 certificate, used to sign many NVIDIA GOP (Graphics Output Protocol) option ROMs, will expire. If Secure Boot is enabled, affected GPUs may fail to POST (boot) on systems without integrated graphics, resulting in black screens and unusable PCs.

  • What breaks:
    • GPUs with VBIOS GOP signed only by the Microsoft UEFI CA 2011 certificate.
    • After expiry, Secure Boot may block the GOP, causing no display output before OS boots.
    • Systems without iGPU may not POST at all.
  • Disabling Secure Boot is not always a workaround:
    • Some anti-cheat software and security features require Secure Boot.
  • What vendors must do:
    • Release updated VBIOS with GOP signed by the Microsoft Option ROM UEFI CA 2023 (ideally dual-signed for compatibility).
  • What users can do:
    • Update motherboard firmware and Windows to ensure 2023 certificates are present.
    • Check if your GPU is affected using scripts or tools (see Reddit thread for details).
    • Contact your GPU vendor (ASUS, MSI, Gigabyte, Palit, EVGA, Zotac, etc.) and NVIDIA to request updated VBIOS before June 2026.

Written using GitHub Copilot GPT-4.1 in agentic mode instructed to follow current codebase style and conventions for writing articles.

Source(s)

  • Reddit: PSA Secure Boot 2026 June cert expiry can block older NVIDIA GOPs at POST
  • Microsoft Secure Boot Certificate Expiration and CA Updates
  • TPU