As the Secure Boot certificate is set to expire in June 2026, Microsoft is distributing a new certificate.
On most LG PCs, the Secure Boot certificate update completes automatically via Windows Update, so no further action is required.
However, if your PC fails to boot or displays the BitLocker screen after the update, please change [Secure Boot] to [Disabled] in the BIOS or enter your BitLocker recovery key.
Will My PC Be Affected if the Secure Boot Certificate Expires?
Secure Boot is a critical security feature that helps prevent malware by ensuring only trusted software runs during startup.
Even if the certificate expires, Windows Update will continue to work normally, and you shouldn’t see major issues in everyday use. However, updates for specific Secure Boot components may be limited.
In collaboration with Microsoft, LG Electronics has already applied the new certificate to models released in 2024 and later. For older models, the new certificate has been rolling out through Windows Update since the second half of 2025.
How to Check if Secure Boot is Enabled
Press [Windows] + [R] on your keyboard to open the Run dialog box.
Type [msinfo32] and press [Enter].
In the [System Information] window, check the [Secure Boot State].
On: Secure Boot is enabled.
Off: Secure Boot is disabled.
How to Fix Boot Issues or BitLocker Screen After an Update
In rare cases, boot failures may occur, or the BitLocker (device encryption) recovery screen may appear during the new certificate update process.
BitLocker Recovery Screen
If the BitLocker recovery screen appears, enter your BitLocker recovery key. If you have lost the key, use a smartphone or another PC to access the Microsoft BitLocker Recovery Key page to unlock the device.
BitLocker is a Windows feature that encrypts your drive. If this feature is enabled, a recovery key may be required due to a TPM reset, BIOS security reset, or motherboard replacement.
-
Reset the BIOS to Default Settings
- 1. Turn on the PC and immediately press [F2] repeatedly. (For a desktop PC, press [Delete].)
- 2. Once you’re in BIOS setup, press [F9] to select [Load Setup Defaults]. Then, press [F10] to save the changes and restart.
- ※ If the BitLocker recovery screen still appears after restarting, sign in to your Microsoft account to find your BitLocker recovery key.
-
Find Your BitLocker Recovery Key via Microsoft Account.
- 1. Use a smartphone or another PC to access the Microsoft BitLocker Recovery key page.
- 2. Sign in with your Microsoft account (email address).
- 3. Select a verification method to verify your identity, click [Send Code].
- ※ Options: Email, Text message, or Voice Message.
- 4. Check the 7-digit Microsoft account [Security code] sent to the email address you entered. Enter the code, then click [Verify].
- 5. Find the 48-digit recovery key that matches your [Device Name] and [Key ID], then use it to unlock BitLocker.
-
How to disable BitLocker
- Windows 11: On the Taskbar, select [Start] → [Settings] → [Privacy & security] → [Device encryption] → [Off].
- Windows 10: On the Taskbar, select [Start] → [Settings] → [Update & Security] → [Device encryption] → [Turn off].
If the PC Won't Boot: Turn Off Secure Boot in BIOS
If the PC fails to boot, you can try temporarily disabling the Secure Boot feature to resolve the issue.
Turn on the PC and immediately press [F2] repeatedly (3–4 times) to enter BIOS setup.
When the BIOS menu appears, use the arrow keys on the keyboard to navigate to the [Security] tab.
Select [Secure Boot Configuration], then press [Enter].
Select [Secure Boot Option] or [Secure Boot] and set it to [Disabled] (Off), then press [Enter].
※ Note: Menu names may vary by model.
Once the settings are complete, press [F10] to save the changes.
Select [Yes]. The PC will automatically restart and boot into Windows.
Frequently Asked Questions (FAQ)
- Q. What should I do if I have an older model purchased before 2024?
-
A. Models released before 2024 or those not on the support list may not have a separate BIOS update available.
However, the new certificate is automatically installed via Windows Update, so no further action is required.
If your PC still won’t boot even after disabling Secure Boot, please contact LG Customer Support.
- Q. Can I reset the BIOS?
-
A. If you have manually updated the new certificate and then reset the BIOS to its default settings (Load Default), the new certificate information may be lost.
This can lead to boot failures or trigger a BitLocker Recovery. We do not recommend resetting the BIOS unless necessary.
Move left or right to check the contents.
This guide was created for all models, so the images or content may be different from your product.

