Microsoft's Secure Boot certificates expire in June and need to be replaced. Microsoft provides a guide for server admins.