{"id":21,"date":"2026-10-18T13:29:46","date_gmt":"2026-10-18T06:29:46","guid":{"rendered":"https:\/\/bicarainfo.com\/teknologi\/?p=21"},"modified":"2026-10-19T10:48:09","modified_gmt":"2026-10-19T03:48:09","slug":"secure-boot-windows-11-expired-19-oktober-2026","status":"publish","type":"post","link":"https:\/\/bicarainfo.com\/teknologi\/secure-boot-windows-11-expired-19-oktober-2026\/","title":{"rendered":"Deadline Secure Boot Windows 11 Jatuh 19 Oktober 2026: Sertifikat PCA 2011 Expired, Cek PC Lo Sekarang!"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">BICARAINFO.COM - Kalau lo lihat kalender, 19 Oktober 2026 ini bukan cuma hari Senin biasa. Ini adalah deadline terakhir dari drama Secure Boot yang sudah diomongin Microsoft sejak 2023.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Sertifikat Microsoft Windows Production PCA 2011 yang selama 15 tahun jadi kunci kepercayaan buat Windows Boot Manager resmi kadaluarsa pada 19 Oktober 2026. Penggantinya, Windows UEFI CA 2023, sudah disebar Microsoft secara diam-diam lewat Windows Update.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Apa yang Sebenarnya Expired? Bukan Windows-nya, Tapi Kuncinya<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Sejak Windows pertama kali dukung Secure Boot, semua PC percaya sama sertifikat yang diterbitkan tahun 2011, dan Microsoft sekarang menggantinya dengan set 2023.<\/p>\n\n\n\n<div class=\"sboot-wrapper\" id=\"sboot-root-2026\">\n<style>\n  .sboot-wrapper { --sboot-accent:#2563eb; --sboot-bg:#ffffff; --sboot-border:#e5e7eb; --sboot-muted:#6b7280; --sboot-text:#111827; --sboot-shadow:0 4px 24px rgba(17,24,39,0.06), 0 1px 3px rgba(17,24,39,0.04); font-family: ui-sans-system, system-ui, -apple-system, \"Segoe UI\", Roboto, \"Helvetica Neue\", Arial, \"Noto Sans\", sans-serif; color:var(--sboot-text); line-height:1.5; -webkit-font-smoothing:antialiased; }\n  .sboot-wrapper * { box-sizing:border-box; }\n  .sboot-container { max-width:880px; margin:0 auto; background:var(--sboot-bg); border:1px solid var(--sboot-border); border-radius:12px; box-shadow:var(--sboot-shadow); overflow:hidden; }\n  .sboot-header { padding:20px 22px 16px; border-bottom:1px solid var(--sboot-border); background: linear-gradient(180deg, #ffffff 0%, #fbfdff 100%); }\n  .sboot-header-top { display:flex; align-items:center; gap:8px; margin-bottom:8px; }\n  .sboot-dot { width:8px; height:8px; border-radius:999px; background:var(--sboot-accent); box-shadow:0 0 0 4px rgba(37,99,235,0.12); }\n  .sboot-kicker { font-size:11px; font-weight:600; letter-spacing:0.08em; text-transform:uppercase; color:var(--sboot-muted); }\n  .sboot-title { margin:0; font-size:16px; font-weight:700; letter-spacing:-0.02em; color:#0f172a; }\n  .sboot-subtitle { margin:4px 0 0; font-size:13px; color:var(--sboot-muted); max-width:52ch; }\n  .sboot-table-head { display:grid; grid-template-columns:1.6fr 1fr 1.6fr 1.2fr; gap:12px; padding:10px 22px; background:#f8fafc; border-bottom:1px solid var(--sboot-border); font-size:11px; font-weight:600; letter-spacing:0.06em; text-transform:uppercase; color:#64748b; }\n  .sboot-rows { display:flex; flex-direction:column; }\n  .sboot-row { border-bottom:1px solid #f1f5f9; cursor:pointer; transition: background 0.18s ease; position:relative; }\n  .sboot-row:last-child { border-bottom:0; }\n  .sboot-row:hover { background:#f8fafc; }\n  .sboot-row.sboot-active { background:#f0f7ff; }\n  .sboot-row-main { display:grid; grid-template-columns:1.6fr 1fr 1.6fr 1.2fr; gap:12px; padding:14px 22px; align-items:center; }\n  .sboot-cell { display:flex; flex-direction:column; gap:6px; min-width:0; }\n  .sboot-cell-label { display:none; font-size:10px; font-weight:600; letter-spacing:0.07em; text-transform:uppercase; color:#94a3b8; }\n  .sboot-cert { display:flex; flex-direction:column; gap:5px; }\n  .sboot-cert-top { display:flex; align-items:center; gap:6px; flex-wrap:wrap; }\n  .sboot-badge { display:inline-flex; align-items:center; padding:2px 7px; border-radius:999px; font-size:10px; font-weight:700; letter-spacing:0.02em; line-height:1; border:1px solid transparent; }\n  .sboot-badge-old { background:#fee2e2; color:#991b1b; border-color:#fecaca; }\n  .sboot-badge-new { background:#dcfce7; color:#166534; border-color:#bbf7d0; }\n  .sboot-name { font-size:13px; font-weight:600; color:#1e293b; line-height:1.35; word-break:break-word; }\n  .sboot-date-wrap { display:flex; flex-direction:column; gap:4px; }\n  .sboot-date { font-size:13px; font-weight:600; color:#334155; }\n  .sboot-date.sboot-date-expired { color:#dc2626; background:#fef2f2; padding:2px 6px; border-radius:6px; border:1px solid #fee2e2; display:inline-flex; width:fit-content; }\n  .sboot-date.sboot-date-today { color:#d97706; background:#fffbeb; padding:2px 6px; border-radius:6px; border:1px solid #fde68a; }\n  .sboot-date.sboot-date-tomorrow { color:#b45309; background:#fef3c7; padding:2px 8px; border-radius:999px; border:1px solid #fde68a; display:inline-flex; width:fit-content; animation:sboot-pulse 1.6s infinite; font-weight:700; }\n  @keyframes sboot-pulse { 0%,100%{ box-shadow:0 0 0 0 rgba(245,158,11,0.35);} 50%{ box-shadow:0 0 0 6px rgba(245,158,11,0);} }\n  .sboot-countdown { font-size:11px; color:#64748b; font-variant-numeric:tabular-nums; }\n  .sboot-func { display:flex; gap:8px; align-items:flex-start; font-size:12.5px; color:#334155; line-height:1.4; }\n  .sboot-icon { flex-shrink:0; width:18px; height:18px; border-radius:6px; background:#eff6ff; border:1px solid #dbeafe; display:grid; place-items:center; color:var(--sboot-accent); margin-top:1px; }\n  .sboot-icon svg { width:12px; height:12px; }\n  .sboot-expand { position:absolute; right:12px; top:18px; width:20px; height:20px; border-radius:6px; border:1px solid var(--sboot-border); background:#fff; display:grid; place-items:center; color:#94a3b8; transition: transform 0.2s ease; }\n  .sboot-row.sboot-active .sboot-expand { transform:rotate(180deg); color:var(--sboot-accent); border-color:#bfdbfe; }\n  .sboot-detail { max-height:0; overflow:hidden; transition: max-height 0.28s cubic-bezier(0.4,0,0.2,1), opacity 0.2s ease; opacity:0; background:#fbfdff; border-top:1px dashed transparent; }\n  .sboot-row.sboot-active .sboot-detail { max-height:260px; opacity:1; border-top-color:#dbeafe; }\n  .sboot-detail-inner { padding:12px 22px 14px 22px; display:grid; grid-template-columns: 1fr 1fr; gap:12px; }\n  .sboot-detail-box { background:#fff; border:1px solid #e5e7eb; border-radius:8px; padding:10px 12px; }\n  .sboot-detail-title { font-size:10px; font-weight:700; letter-spacing:0.06em; text-transform:uppercase; color:#64748b; margin-bottom:4px; }\n  .sboot-detail-text { font-size:12px; color:#475569; line-height:1.5; }\n  .sboot-detail-impact { font-size:11px; color:#1e40af; background:#eff6ff; border:1px solid #dbeafe; border-radius:6px; padding:6px 8px; margin-top:8px; display:flex; gap:6px; }\n  .sboot-footer { padding:10px 22px; display:flex; flex-wrap:wrap; gap:8px 16px; align-items:center; justify-content:space-between; background:#f8fafc; border-top:1px solid var(--sboot-border); font-size:11px; color:#64748b; }\n  .sboot-footer-left { display:flex; gap:10px; align-items:center; }\n  .sboot-legend { display:inline-flex; gap:6px; align-items:center; }\n  .sboot-legend-dot { width:8px; height:8px; border-radius:999px; }\n  @media (max-width: 720px){\n    .sboot-table-head { display:none; }\n    .sboot-header { padding:16px 16px 14px; }\n    .sboot-row-main { grid-template-columns:1fr; gap:14px; padding:14px 16px 14px 16px; padding-right:44px; }\n    .sboot-cell-label { display:block; }\n    .sboot-cell { gap:4px; }\n    .sboot-expand { right:10px; top:16px; }\n    .sboot-detail-inner { grid-template-columns:1fr; padding:12px 16px; }\n    .sboot-footer { padding:10px 16px; flex-direction:column; align-items:flex-start; }\n  }\n<\/style>\n\n<div class=\"sboot-container\">\n  <div class=\"sboot-header\">\n    <div class=\"sboot-header-top\">\n      <div class=\"sboot-dot\"><\/div>\n      <span class=\"sboot-kicker\">Microsoft Secure Boot \u00b7 Rotasi 2011 \u2192 2023<\/span>\n    <\/div>\n    <h3 class=\"sboot-title\">Migrasi Sertifikat Secure Boot<\/h3>\n    <p class=\"sboot-subtitle\">Sertifikat 2011 akan kedaluwarsa 2026. Perangkat perlu update KEK & DB terbaru agar tetap boot dengan aman.<\/p>\n  <\/div>\n\n  <div class=\"sboot-table-head\">\n    <div>Sertifikat Lama<\/div>\n    <div>Kedaluwarsa<\/div>\n    <div>Sertifikat Baru<\/div>\n    <div>Fungsi<\/div>\n  <\/div>\n\n  <div class=\"sboot-rows\">\n    <!-- ROW 1 -->\n    <div class=\"sboot-row\" data-expire=\"2026-06-24\" data-name=\"KEK\">\n      <div class=\"sboot-row-main\">\n        <div class=\"sboot-cell\">\n          <span class=\"sboot-cell-label\">Sertifikat Lama<\/span>\n          <div class=\"sboot-cert\">\n            <div class=\"sboot-cert-top\"><span class=\"sboot-badge sboot-badge-old\">2011<\/span><\/div>\n            <div class=\"sboot-name\">Microsoft Corporation KEK CA 2011<\/div>\n          <\/div>\n        <\/div>\n        <div class=\"sboot-cell\">\n          <span class=\"sboot-cell-label\">Kedaluwarsa<\/span>\n          <div class=\"sboot-date-wrap\">\n            <span class=\"sboot-date\" data-date=\"2026-06-24\">24 Juni 2026<\/span>\n            <span class=\"sboot-countdown\"><\/span>\n          <\/div>\n        <\/div>\n        <div class=\"sboot-cell\">\n          <span class=\"sboot-cell-label\">Sertifikat Baru<\/span>\n          <div class=\"sboot-cert\">\n            <div class=\"sboot-cert-top\"><span class=\"sboot-badge sboot-badge-new\">2023<\/span><\/div>\n            <div class=\"sboot-name\">Microsoft Corporation KEK 2K CA 2023<\/div>\n          <\/div>\n        <\/div>\n        <div class=\"sboot-cell\">\n          <span class=\"sboot-cell-label\">Fungsi<\/span>\n          <div class=\"sboot-func\">\n            <span class=\"sboot-icon\">\n              <svg viewBox=\"0 0 16 16\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.4\"><path d=\"M8 2.5a3 3 0 0 0-3 3v1H4.5A1.5 1.5 0 0 0 3 8v4.5A1.5 1.5 0 0 0 4.5 14h7A1.5 1.5 0 0 0 13 12.5V8A1.5 1.5 0 0 0 11.5 6.5H11v-1a3 3 0 0 0-3-3Z\"\/><circle cx=\"8\" cy=\"10\" r=\"1.25\"\/><\/svg>\n            <\/span>\n            <span>Otorisasi update database Secure Boot (DB &amp; DBX)<\/span>\n          <\/div>\n        <\/div>\n      <\/div>\n      <div class=\"sboot-expand\">\n        <svg width=\"12\" height=\"12\" viewBox=\"0 0 16 16\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.6\"><path d=\"M3 6l5 5 5-5\"\/><\/svg>\n      <\/div>\n      <div class=\"sboot-detail\">\n        <div class=\"sboot-detail-inner\">\n          <div class=\"sboot-detail-box\">\n            <div class=\"sboot-detail-title\">Apa yang terjadi?<\/div>\n            <div class=\"sboot-detail-text\">KEK adalah root trust untuk update DB\/DBX. Tanpa KEK 2023, perangkat tidak bisa menerima daftar blokir & daftar izin baru dari Microsoft.<\/div>\n            <div class=\"sboot-detail-impact\">\n              <span>\u26a0<\/span><span>Jika tidak di-update sebelum 24 Juni 2026, update keamanan boot di masa depan akan gagal.<\/span>\n            <\/div>\n          <\/div>\n          <div class=\"sboot-detail-box\">\n            <div class=\"sboot-detail-title\">Tindakan<\/div>\n            <div class=\"sboot-detail-text\">Pastikan firmware UEFI terbaru sudah include KEK 2023. Cek via msinfo32 \u2192 Secure Boot State atau registry KEK.<\/div>\n          <\/div>\n        <\/div>\n      <\/div>\n    <\/div>\n\n    <!-- ROW 2 -->\n    <div class=\"sboot-row\" data-expire=\"2026-06-27\" data-name=\"UEFI CA\">\n      <div class=\"sboot-row-main\">\n        <div class=\"sboot-cell\">\n          <span class=\"sboot-cell-label\">Sertifikat Lama<\/span>\n          <div class=\"sboot-cert\">\n            <div class=\"sboot-cert-top\"><span class=\"sboot-badge sboot-badge-old\">2011<\/span><\/div>\n            <div class=\"sboot-name\">Microsoft UEFI CA 2011<\/div>\n          <\/div>\n        <\/div>\n        <div class=\"sboot-cell\">\n          <span class=\"sboot-cell-label\">Kedaluwarsa<\/span>\n          <div class=\"sboot-date-wrap\">\n            <span class=\"sboot-date\" data-date=\"2026-06-27\">27 Juni 2026<\/span>\n            <span class=\"sboot-countdown\"><\/span>\n          <\/div>\n        <\/div>\n        <div class=\"sboot-cell\">\n          <span class=\"sboot-cell-label\">Sertifikat Baru<\/span>\n          <div class=\"sboot-cert\">\n            <div class=\"sboot-cert-top\"><span class=\"sboot-badge sboot-badge-new\">2023<\/span><\/div>\n            <div class=\"sboot-name\">Microsoft UEFI CA 2023<\/div>\n          <\/div>\n        <\/div>\n        <div class=\"sboot-cell\">\n          <span class=\"sboot-cell-label\">Fungsi<\/span>\n          <div class=\"sboot-func\">\n            <span class=\"sboot-icon\">\n              <svg viewBox=\"0 0 16 16\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.4\"><rect x=\"2.5\" y=\"3.5\" width=\"11\" height=\"9\" rx=\"2\"\/><path d=\"M5.5 7h5M5.5 10h3\"\/><\/svg>\n            <\/span>\n            <span>Signing bootloader pihak ketiga (Linux, shim)<\/span>\n          <\/div>\n        <\/div>\n      <\/div>\n      <div class=\"sboot-expand\"><svg width=\"12\" height=\"12\" viewBox=\"0 0 16 16\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.6\"><path d=\"M3 6l5 5 5-5\"\/><\/svg><\/div>\n      <div class=\"sboot-detail\">\n        <div class=\"sboot-detail-inner\">\n          <div class=\"sboot-detail-box\">\n            <div class=\"sboot-detail-title\">Apa yang terjadi?<\/div>\n            <div class=\"sboot-detail-text\">UEFI CA memverifikasi bootloader non-Microsoft. Sertifikat 2011 yang kedaluwarsa akan membuat dual-boot Linux gagal Secure Boot.<\/div>\n            <div class=\"sboot-detail-impact\"><span>\u26a0<\/span><span>Distro Linux perlu shim terbaru yang signed dengan UEFI CA 2023.<\/span><\/div>\n          <\/div>\n          <div class=\"sboot-detail-box\">\n            <div class=\"sboot-detail-title\">Tindakan<\/div>\n            <div class=\"sboot-detail-text\">Update shim & grub. Untuk IT Admin: distribusikan DB update yang include CA 2023 via Windows Update.<\/div>\n          <\/div>\n        <\/div>\n      <\/div>\n    <\/div>\n\n    <!-- ROW 3 -->\n    <div class=\"sboot-row\" data-expire=\"2026-10-19\" data-name=\"PCA\">\n      <div class=\"sboot-row-main\">\n        <div class=\"sboot-cell\">\n          <span class=\"sboot-cell-label\">Sertifikat Lama<\/span>\n          <div class=\"sboot-cert\">\n            <div class=\"sboot-cert-top\"><span class=\"sboot-badge sboot-badge-old\">2011<\/span><\/div>\n            <div class=\"sboot-name\">Microsoft Windows Production PCA 2011<\/div>\n          <\/div>\n        <\/div>\n        <div class=\"sboot-cell\">\n          <span class=\"sboot-cell-label\">Kedaluwarsa<\/span>\n          <div class=\"sboot-date-wrap\">\n            <span class=\"sboot-date\" data-date=\"2026-10-19\">19 Oktober 2026<\/span>\n            <span class=\"sboot-countdown\"><\/span>\n          <\/div>\n        <\/div>\n        <div class=\"sboot-cell\">\n          <span class=\"sboot-cell-label\">Sertifikat Baru<\/span>\n          <div class=\"sboot-cert\">\n            <div class=\"sboot-cert-top\"><span class=\"sboot-badge sboot-badge-new\">2023<\/span><\/div>\n            <div class=\"sboot-name\">Windows UEFI CA 2023<\/div>\n          <\/div>\n        <\/div>\n        <div class=\"sboot-cell\">\n          <span class=\"sboot-cell-label\">Fungsi<\/span>\n          <div class=\"sboot-func\">\n            <span class=\"sboot-icon\">\n              <svg viewBox=\"0 0 16 16\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.4\"><path d=\"M3 8.5V5.5A2.5 2.5 0 0 1 5.5 3h5A2.5 2.5 0 0 1 13 5.5v5A2.5 2.5 0 0 1 10.5 13h-5A2.5 2.5 0 0 1 3 10.5v-2\"\/><path d=\"M6 8l2 2 4-4\"\/><\/svg>\n            <\/span>\n            <span>Signing Windows Boot Manager<\/span>\n          <\/div>\n        <\/div>\n      <\/div>\n      <div class=\"sboot-expand\"><svg width=\"12\" height=\"12\" viewBox=\"0 0 16 16\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.6\"><path d=\"M3 6l5 5 5-5\"\/><\/svg><\/div>\n      <div class=\"sboot-detail\">\n        <div class=\"sboot-detail-inner\">\n          <div class=\"sboot-detail-box\">\n            <div class=\"sboot-detail-title\">Apa yang terjadi?<\/div>\n            <div class=\"sboot-detail-text\">PCA 2011 adalah penanda tangan bootmgr Windows. Setelah 19 Okt 2026, boot Windows tanpa update DB akan ditolak firmware.<\/div>\n            <div class=\"sboot-detail-impact\"><span>\u26a0<\/span><span>Update kumulatif Windows 24H2+ sudah menyertakan CA 2023 ke DB.<\/span><\/div>\n          <\/div>\n          <div class=\"sboot-detail-box\">\n            <div class=\"sboot-detail-title\">Tindakan<\/div>\n            <div class=\"sboot-detail-text\">Pastikan Windows Update aktif. Untuk offline deployment, inject DB update ke image WIM.<\/div>\n          <\/div>\n        <\/div>\n      <\/div>\n    <\/div>\n\n  <\/div>\n\n  <div class=\"sboot-footer\">\n    <div class=\"sboot-footer-left\">\n      <span class=\"sboot-legend\"><span class=\"sboot-legend-dot\" style=\"background:#fecaca\"><\/span> 2011 lama<\/span>\n      <span class=\"sboot-legend\"><span class=\"sboot-legend-dot\" style=\"background:#bbf7d0\"><\/span> 2023 baru<\/span>\n      <span>Klik baris untuk detail<\/span>\n    <\/div>\n    <div>Update terakhir: Juni 2025 \u00b7 Sumber: Microsoft Learn<\/div>\n  <\/div>\n<\/div>\n\n<script>\n(function(){\n  var root = document.getElementById('sboot-root-2026');\n  if(!root) return;\n  var rows = root.querySelectorAll('.sboot-row');\n\n  function fmtLong(dateStr){\n    try{\n      var p = dateStr.split('-');\n      var y = parseInt(p[0],10), m = parseInt(p[1],10)-1, d = parseInt(p[2],10);\n      var dt = new Date(y,m,d);\n      var months = ['Januari','Februari','Maret','April','Mei','Juni','Juli','Agustus','September','Oktober','November','Desember'];\n      return d + ' ' + months[dt.getMonth()] + ' ' + y;\n    }catch(e){ return dateStr; }\n  }\n  function fmtShort(dateStr){\n    try{\n      var p = dateStr.split('-');\n      var y = parseInt(p[0],10), m = parseInt(p[1],10)-1, d = parseInt(p[2],10);\n      var dt = new Date(y,m,d);\n      var months = ['Jan','Feb','Mar','Apr','Mei','Jun','Jul','Ags','Sep','Okt','Nov','Des'];\n      return d + ' ' + months[dt.getMonth()] + ' ' + y;\n    }catch(e){ return dateStr; }\n  }\n\n  function diffDays(target){\n    var now = new Date();\n    var start = new Date(now.getFullYear(), now.getMonth(), now.getDate());\n    var t = new Date(target.getFullYear(), target.getMonth(), target.getDate());\n    return Math.round((t - start) \/ 86400000);\n  }\n\n  rows.forEach(function(row){\n    var expireStr = row.getAttribute('data-expire');\n    if(!expireStr) return;\n    var parts = expireStr.split('-');\n    var exp = new Date(parseInt(parts[0],10), parseInt(parts[1],10)-1, parseInt(parts[2],10));\n    var dEl = row.querySelector('.sboot-date');\n    var cEl = row.querySelector('.sboot-countdown');\n    var diff = diffDays(exp);\n\n    if(diff < 0){\n      dEl.textContent = 'Expired';\n      dEl.className = 'sboot-date sboot-date-expired';\n      cEl.textContent = fmtLong(expireStr) + ' \u00b7 lewat ' + Math.abs(diff) + ' hari';\n    } else if(diff === 0){\n      dEl.textContent = 'Hari ini - ' + fmtShort(expireStr);\n      dEl.className = 'sboot-date sboot-date-today';\n      cEl.textContent = 'Kadaluarsa hari ini';\n    } else if(diff === 1){\n      dEl.textContent = 'Besok - ' + fmtShort(expireStr);\n      dEl.className = 'sboot-date sboot-date-tomorrow';\n      cEl.textContent = 'Tersisa 1 hari';\n    } else {\n      dEl.textContent = fmtLong(expireStr);\n      dEl.className = 'sboot-date';\n      if(diff <= 30){\n        cEl.textContent = diff + ' hari lagi';\n        cEl.style.color = '#d97706';\n        cEl.style.fontWeight = '600';\n      } else if(diff <= 90){\n        cEl.textContent = diff + ' hari lagi';\n      } else {\n        var monthsLeft = Math.floor(diff\/30);\n        cEl.textContent = '~' + monthsLeft + ' bulan lagi';\n      }\n    }\n\n    row.addEventListener('click', function(e){\n      var isActive = row.classList.contains('sboot-active');\n      root.querySelectorAll('.sboot-row.sboot-active').forEach(function(r){ r.classList.remove('sboot-active'); });\n      if(!isActive){ row.classList.add('sboot-active'); }\n    });\n  });\n\n  \/\/ Demo helper: if you want to test expired\/tomorrow, ubah data-expire di HTML lalu refresh\n})();\n<\/script>\n<\/div>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Khusus yang 19 Oktober ini, ini yang paling krusial buat pengguna Windows 11. Sertifikat ini yang dipakai buat tanda tangan Windows Boot Manager \u2014 file pertama yang jalan pas PC lo nyala.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">PC Lo Masih Bisa Nyala? Bisa, Tapi...<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Ini yang bikin banyak media luar clickbait. Jawaban resminya dari Microsoft: PC lo gak akan berhenti booting saat expired.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Menurut panduan Microsoft, PC tanpa sertifikat baru \u201cwill still start and operate normally,\u201d dan update Windows standar tetap kepasang. Namun, PC tersebut tidak lagi bisa menerima proteksi keamanan baru untuk proses early boot.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Artinya:<br>Dari 19 Oktober, Microsoft gak bisa lagi tanda tanganin Boot Manager baru pakai sertifikat lama. Jadi semua Boot Manager rilis baru bakal pakai tanda tangan 2023. Kalau firmware PC lo belum punya sertifikat 2023 di database DB-nya, PC lo bakal nolak Boot Manager baru itu. Alhasil, lo gak dapat patch bootkit, firmware rootkit, dan virus boot-sector terbaru.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ini adalah deadline besar terakhir dalam transisi sertifikat Secure Boot 2026 Microsoft, setelah dua sertifikat 2011 lainnya expired di Juni.<\/p>\n\n\n<div class=\"bic-baca-juga\"><strong>Baca juga:<\/strong> <a href=\"https:\/\/bicarainfo.com\/teknologi\/migrasi-linux-pc-gagal-secure-boot-2023\/\">PC Tidak Kompatibel Secure Boot 2023? Migrasi ke Linux Jadi Jalan Keluar Termurah di Tengah Harga Komponen PC yang Mahal<\/a><\/div>\n\n\n\n<h2 class=\"wp-block-heading\">Microsoft Udah Sebar Obatnya Sejak Juni, Kok Masih Ada yang Ketinggalan?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Sejak Januari 2026, Microsoft sebenarnya sudah diam-diam gulirkan sertifikat Secure Boot baru lewat Windows Update. Dikenal sebagai Windows UEFI CA 2023, sertifikat ini gantikan sertifikat asli 2011 yang mulai expired Juni 2026.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Mekanismenya: Microsoft distribusikan firmware database update (\u201cSecure Boot DB Update\u201d dengan \u201cWindows UEFI CA 2023\u201d) via Windows Update, yang secara permanen nulis sertifikat baru ke firmware sistem.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Tapi, distribusi otomatis ini cuma terjadi di Windows 11. Dan ada beberapa kasus gagal:<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Firmware BIOS lo jadul dan belum di-update OEM (Dell, Lenovo, Asus).<\/li>\n\n\n\n<li>Secure Boot dalam keadaan mati di BIOS.<\/li>\n\n\n\n<li>Lo masih di Windows 10 tanpa program Extended Security Updates (ESU) \u2014 gak dapat jalur remediasi.<\/li>\n\n\n\n<li>Konflik BitLocker atau lo skip update KB5083631 yang butuh restart dua kali \u2014 restart pertama selesaikan cumulative update, restart kedua apply sertifikat baru.<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">Makanya masih jutaan PC yang ketinggalan.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Cara Cek Manual di Windows Security (Cuma 30 Detik)<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Jangan panik. Cek dulu:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Cara 1: Via UI (Paling Gampang)<\/strong><\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Buka Settings &gt; Windows Security &gt; Device Security<\/li>\n\n\n\n<li>Lihat bagian Secure Boot<\/li>\n\n\n\n<li>Kalau pesannya \u201cSecure Boot is on and all required certificate updates have been applied. No further certificate changes are needed\u201d plus centang hijau, lo aman.<\/li>\n\n\n\n<li>Kalau ada peringatan kuning atau silang merah, atau icon blue shield di system tray dengan tanda kuning\/merah, berarti sertifikat lo belum update.<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Cara 2: Via PowerShell (Buat Anak IT)<br><\/strong>Buka PowerShell Admin dan paste:<br>[System.Text.Encoding]::ASCII.GetString((Get-SecureBootUEFI db).bytes) -match 'Windows UEFI CA 2023'<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Hasil <strong>True<\/strong> = sertifikat 2023 (valid sampai 2053) sudah terpasang.<\/li>\n\n\n\n<li>Hasil <strong>False<\/strong> = lo masih pakai sertifikat asli yang mulai expired Juni 2026.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Kalau False, solusinya: Nyalain Windows Update, install semua cumulative update, dan cek website OEM lo buat BIOS update terbaru. Microsoft bilang device yang kompatibel masih bisa pindah ke sertifikat 2023 yang lebih baru bahkan setelah sertifikat lama expired.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Kenapa Ini Kritis? Bootkit Gak Main-Main<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Secure Boot itu gerbang pertama. Kalau gerbang ini pakai kunci kadaluarsa, penyerang bisa selipkan bootkit \u2014 malware yang jalan SEBELUM Windows nyala, jadi antivirus lo gak bisa deteksi.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">PC dengan sertifikat expired gak punya jalur patch terhadap ancaman masa depan di level firmware. Driver baru, firmware hardware, dan komponen boot yang ditandatangani dengan sertifikat 2023 gak akan dipercaya, memaksa workaround manual.<\/p>\n\n\n<div class=\"bic-baca-juga\"><strong>Baca juga:<\/strong> <a href=\"https:\/\/bicarainfo.com\/teknologi\/secure-boot-expired-pc-tetap-nyala-cara-cek\/\">Deadline Secure Boot Hari Ini 19 Okt 2026: Sertifikat PCA 2011 Expired, PC Lo Jadi Zombie?<\/a><\/div>\n","protected":false},"excerpt":{"rendered":"<p>Besok, 19 Oktober 2026, sertifikat sakti Microsoft Windows Production PCA 2011 resmi expired. Ini sertifikat yang tanda tanganin Windows Boot Manager di semua PC lo sejak 2011. Microsoft udah nyebar penggantinya Windows UEFI CA 2023 lewat Windows Update sejak Juni. Kabar baik: PC yang belum update tetap bisa nyala, tapi gak bakal dapat patch keamanan boot-level lagi.<\/p>\n","protected":false},"author":1,"featured_media":22,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[9],"tags":[11,10],"class_list":["post-21","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security","tag-microsoft","tag-windows-11"],"_links":{"self":[{"href":"https:\/\/bicarainfo.com\/teknologi\/wp-json\/wp\/v2\/posts\/21","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/bicarainfo.com\/teknologi\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/bicarainfo.com\/teknologi\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/bicarainfo.com\/teknologi\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/bicarainfo.com\/teknologi\/wp-json\/wp\/v2\/comments?post=21"}],"version-history":[{"count":0,"href":"https:\/\/bicarainfo.com\/teknologi\/wp-json\/wp\/v2\/posts\/21\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/bicarainfo.com\/teknologi\/wp-json\/wp\/v2\/media\/22"}],"wp:attachment":[{"href":"https:\/\/bicarainfo.com\/teknologi\/wp-json\/wp\/v2\/media?parent=21"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/bicarainfo.com\/teknologi\/wp-json\/wp\/v2\/categories?post=21"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/bicarainfo.com\/teknologi\/wp-json\/wp\/v2\/tags?post=21"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}