Microsoft's January Patch Tuesday update replaces expiring Secure Boot certificates on Windows PCs to help protect against bootkit malware that can load before Windows and security software. Secure Boot uses certificates to ensure only trusted programs run during the boot process, and those certificates are set to expire