Secure Boot protects your PC against bootkit malware. The Windows update refreshes expiring Secure Boot certificates. To install, head to Settings and select Windows Update. I typically advise Windows ...