Home Support Security Security Updates for NI Software

Microsoft 2011 Secure Boot Certificate Expiration

Created Jul 1, 2026

Overview

Microsoft 2011 Secure Boot Certificates expire June 2026.  Once the certificates expire, a device is no longer able to get updates for the Windows Boot Manager and the Secure Boot components.  Devices not using Secure Boot will continue to operate and receive normal Windows Updates.        

  

This behavior is also described as vulnerability CVE-2026-21265.

 

What is Secure Boot?

Secure Boot is a security feature embedded in Unified Extensible Firmware Interface (UEFI) based firmware, designed to ensure that only trusted software launches during a device's boot sequence. It works by checking the digital signature of pre-boot software—such as firmware modules, drivers, and boot loaders—against a set of trusted digital certificates stored within the firmware. This industry standard not only authenticates system components before execution but also establishes a secure chain of trust from the device's firmware to the operating system. 

 

More detail from Microsoft can be found in the Microsoft KB article here, including certificate specifics: Windows Secure Boot certificate expiration and CA updates.

Contents

Mitigation Guidance

NI recommends updating the BIOS with the latest certificates to ensure Secure Boot continues to work appropriately. Refer to the Affected Products section for information on upgrading these products.  

Update the BIOS

Follow these steps:

  1. Download the latest Firmware for your controller (See Affected Products)
  2. Open NI MAX or NI Hardware Configuration Utility 
  3. Browse to the device to update
  4. Select Update Firmware button
  5. Locate and select the firmware image file saved in step 1
  6. Proceed with the update
  7. Reboot the system after the process is completed. 
Back to top

Affected Products

 

Back to top

CVSS Score

CVE-2026-21265 – 6.4 - CVSS:3.1 AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Back to top

NI Update Service

NI Update Service is a Windows utility that checks for and delivers updates for NI software and drivers, including security updates. It can be used to manually check for updates, configured to periodically check and notify users, or to automatically download and install updates at a scheduled time.

Some mitigations in this advisory are delivered through NI Update Service. NI recommends upgrading to NI Update Service 2026 Q1 or later to get the latest updates. NI Update Service can be installed on its own and is backwards compatible with older NI software.

Back to top

Further Information

At NI, we view the security of our products as an important part of our commitment to our customers.  Go to ni.com/security to stay informed and act upon security alerts and issues.

Back to top

Additional Resources


Windows is a trademark of the Microsoft group of companies.

Back to top
Product VersionMitigation
PXIe-8862/8842/8822Download and install Firmware version 2026 Q3 or later from Software Downloads.
The updated BIOS version will be 1.3.1f1  
PXIe-8881Download and install Firmware version 26.5.0f4 or later from Software Downloads.
The updated BIOS version will be 2.1.9f1

Was this information helpful?

Yes

No