Windows PCs Freezing After Startup? How to Check the Secure-Boot-Update Task

Some Windows 10 and 11 users have reported their PCs freezing a few minutes after startup, with the problem appearing when the computer is online. In some reports, the freeze coincided with the Secure-Boot-Update scheduled task. That makes the task worth checking, but it does not establish a universal cause—or show that internet access triggers the freeze. 913

What the Secure-Boot-Update task does

Microsoft is updating Secure Boot certificates originally issued in 2011; they began expiring in June 2026. Windows uses the \Microsoft\Windows\PI\Secure-Boot-Update scheduled task to help apply certificate updates. Microsoft says the task should be present, enabled, and run as Local System. 13

Some PCs may also need a firmware update from their manufacturer to complete Secure Boot certificate updates. A freeze near a task run could point to an issue worth investigating, but timing alone does not confirm a firmware failure. 17

Does being online cause the freeze?

Not necessarily. Microsoft says Secure Boot certificate updates do not require network access, so an online-only symptom is not evidence that the update process depends on an internet connection. The connection may simply coincide with another event; check the task’s run history and other system evidence before drawing a conclusion. 12

How to check whether the task is involved

1. Press Win + R, enter taskschd.msc, and press Enter.
2. Go to Task Scheduler Library → Microsoft → Windows → PI → Secure-Boot-Update.
3. Check whether the task is enabled, its Last Run Time and Last Run Result, and—if available—its history. Compare the times with when the freezes occur.
4. Confirm the task is present and enabled and runs as Local System. Microsoft also recommends checking that it has run since the most recent Windows security update. 1
5. In Windows Security → Device security, check the Secure Boot update status. If Windows indicates a firmware update is needed, consult the PC manufacturer’s support information for the specific device. 117

A matching timestamp is a clue, not proof. If the timing does line up, review relevant Windows event logs around the freeze and note any Secure Boot or firmware errors before changing settings. 1819

Should you disable the task?

Some users report that temporarily disabling Secure-Boot-Update stopped their freezes. That makes disabling it a possible diagnostic workaround if the timing strongly matches and the PC is difficult to use—not a confirmed fix for every system. 913

There is a trade-off: disabling the task can prevent Windows from applying pending Secure Boot certificate updates. If you try it, treat the change as temporary, check for manufacturer guidance or a relevant firmware update, and re-enable the task rather than leaving certificate servicing paused indefinitely. Disabling the scheduled task is also different from turning Secure Boot off in the PC’s firmware settings. 3617