Share via

Secure boot enabled, hardware firmware limitation however

Corvid 0 Reputation points
2026-06-10T20:10:39.5333333+00:00

Hi! sorry new to asking here, title says it all basically.
I just wanted to know what I need to do in order to fix windows security saying that Secure boot is on but not supported for updates due to hardware firmware limitations.
I've tried to attach the msinfo32 screenshot.
Thanks!
Screenshot 2026-06-10 210016

Windows for home | Windows 11 | Security and privacy
0 comments No comments

2 answers

Sort by: Most helpful
  1. Ivan B 114.5K Reputation points Independent Advisor
    2026-06-10T21:16:34.44+00:00

    Was this answer helpful?


  2. AI answer

    2026-06-10T20:10:56.28+00:00

    Windows Security is reporting that Secure Boot is enabled but not supported for future Secure Boot certificate updates because of a firmware limitation on this device. That status means Windows can use Secure Boot today, but the device’s UEFI firmware cannot reliably accept the newer Secure Boot database/revocation updates that Microsoft is rolling out.

    On such hardware there is no Windows-side fix; the limitation is in the device firmware. The supported options are:

    1. Check for the latest firmware/BIOS from the device manufacturer (Acer in this case) and install it. Some devices receive updated firmware that adds support for the new Secure Boot certificate update path.
    2. If, after updating to the latest available firmware, Windows still reports that Secure Boot updates are not supported because of hardware/firmware limitations, treat the device as not supported for automated Secure Boot certificate updates. In Microsoft guidance this corresponds to a “Not Supported – Known Limitation” state, where no automatic resolution is available.
    3. If Secure Boot updates remain unsupported and the device is still in support with the OEM, contact the OEM’s support to confirm whether a newer firmware is planned. If the device is out of support and no firmware update is available, the only way to fully support future Secure Boot updates is to move to newer hardware that does not have this limitation.

    Windows will continue to boot and receive normal Windows Updates on such a device, but future boot-level protections that rely on updated Secure Boot certificates might not be applied.


    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.