When current Secure Boot certificates expire (June 2026), can new OS be installed on a dual boot Windows 10/Ubuntu PC?

Though I’ve seen statements that, when Secure Boot certificates expire (2011 ones in June 2026), machines will continue to boot the current operating systems.

Without means to install new certificates, can an OS be updated or a new OS installed, without need to turn off Secure Boot?

  • On a dual boot Windows 10/Ubuntu PC, can a newer version of Ubuntu be installed, and would that affect booting Windows 10?
  • On Ubuntu-only machines, can updated to a new version?
  • Are there ways to have a new OS, installed with Secure Boot off, to be accepted as a Secure Boot OS?