Microsoft's ESU program provides security updates for Windows 10. You normally just head to Windows Update to register for the program. If the option doesn't appear, there are ways to trigger it.
Microsoft Secure Boot certificates from 2011 begin expiring in June 2026. Here’s how to check whether your Windows PC has the 2023 update.