The Secure Boot certificates from 2011 expire in June of this year. Microsoft Defender helps in the enterprise environment.