WK Hub — Postshttps://wk-hub-4e2.pages.dev/Notes and tools from the workenWindows 10 security updates extended to October 2027: who gets them and howhttps://wk-hub-4e2.pages.dev/windows-10-esu-extended-2027https://wk-hub-4e2.pages.dev/windows-10-esu-extended-2027Sun, 25 Oct 2026 08:00:00 GMTMicrosoft extended free Windows 10 security updates (consumer ESU) to 12 October 2027. Who qualifies, how to check a PC is covered, and what businesses must do instead.Windows 10ESUSecurity updatesWindows 11 Secure Boot certificates expired in 2026: check and update your Windows PCshttps://wk-hub-4e2.pages.dev/secure-boot-certificates-expire-2026https://wk-hub-4e2.pages.dev/secure-boot-certificates-expire-2026Sun, 25 Oct 2026 08:00:00 GMTThe 2011 Secure Boot certificates expired in 2026, the Windows Production PCA 2011 on 19 October. Check a PC in two minutes, move it to Windows UEFI CA 2023, and roll it out with Intune.Secure BootBitLockerIntunePowerShellUEFI BitLocker startup PIN in Intune without admin rightshttps://wk-hub-4e2.pages.dev/bitlocker-startup-pin-intunehttps://wk-hub-4e2.pages.dev/bitlocker-startup-pin-intuneThu, 01 Oct 2026 08:00:00 GMTPrompt users for a BitLocker pre-boot startup PIN from Intune without granting local admin rights, using a Win32 app and ServiceUI.exe to escape Session 0.BitLockerIntuneTPM+PINServiceUIPowerShell