The January Patch Tuesday updates for Windows refresh the expiring certificates for Secure Boot, which protects your computer against bootkit malware.