Anybody still holding onto Windows 10 will only get the renewed Secure Boot certificates if they've subscribed to the paid ESU program, because non-subscribed devices are no longer compatible with the ...