AM5 boards need BIOS updates
Motherboard and BIOS updates for AM5 platforms are becoming effectively mandatory before June 2026 because Secure Boot certificate changes will require action from manufacturers and users. (igorslab.de) The notice warns builders to plan firmware updates now rather than later to avoid boot problems once the certificate changes take effect. (igorslab.de)
Secure Boot is the lock that checks trusted code before a PC starts, and many AM5 motherboards will need BIOS updates before the first Microsoft certificates expire in June 2026. (microsoft.com) Microsoft said the original 2011 Secure Boot certificates begin expiring in June 2026 and continue through October 2026. The replacement set uses 2023 certificates, including new Microsoft UEFI Certificate Authority and Key Exchange Key entries. (microsoft.com) On Windows PCs, the update is not just a Windows patch. Microsoft said the Unified Extensible Firmware Interface databases and keys also need support from original equipment manufacturers through firmware updates. (techcommunity.microsoft.com) That is where AM5 boards come in. Igor’sLAB reported on April 12, 2026 that motherboard vendors are now pushing BIOS releases so boards can accept or work correctly with the 2023 Secure Boot certificates before the 2011 chain starts aging out. (igorslab.de) Microsoft said devices that miss the new certificates should still boot and keep getting standard Windows updates, but they can lose newer Secure Boot protections and may run into problems with future trust changes. The company told administrators to finish planning before June 2026. (microsoft.com) Board makers have started publishing model-by-model instructions. ASUS said the database update has been rolling out since 2024 and that users with default settings usually do not need extra manual steps, while warning that a BIOS update can trigger a BitLocker recovery prompt. (asus.com) MSI said users should install BIOS versions that explicitly list “Windows UEFI CA 2023” and “Microsoft UEFI CA 2023” in the changelog. The company also said Windows Update can activate the certificates after the firmware side is ready. (msi.com) ASRock’s support pages now show fresh BIOS builds dated April 10, 2026 with descriptions such as “Update Secure Boot Key (2023 KEK/DB/PK)” across a long list of boards. That language refers to the platform key, key exchange key, and allowed signature database used by Secure Boot. (asrock.com) Microsoft said many PCs built since 2024 already include the newer certificates, but older systems depend on a mix of Windows updates and vendor firmware support. On a custom-built AM5 desktop, that means the motherboard BIOS matters as much as the operating system. (techcommunity.microsoft.com) The practical check is simple: look for a BIOS update that mentions Secure Boot keys or 2023 certificates, install it before late June 2026, and keep your BitLocker recovery key handy. The deadline is still months away, but the fixes are already arriving board by board. (asus.com)
