You are using an out of date browser. It may not display this or other websites correctly. You should upgrade or use an alternative browser.
it admin checklist
About this tag
The it admin checklist tag on WindowsForum.com covers critical infrastructure updates that IT administrators must track, particularly the Secure Boot certificate transition beginning June 2026. Content focuses on Microsoft's replacement of the original 2011 Secure Boot certificate chain across Windows 10, Windows 11, and Windows Server systems. Discussions highlight that this is foundational security plumbing rather than a feature release, with certificates expiring through October 2026. Threads detail how KB5092765 serves as a Setup Dynamic Update for Windows 11 versions 24H2 and 25H2, warning about the trust chain transition. IT admins are advised to plan for this once-in-a-generation change to maintain boot security and system integrity.
Microsoft is replacing the original 2011 Secure Boot certificate chain across Windows PCs and servers before certificates begin expiring in June 2026 and continue expiring into October, affecting supported Windows 10, Windows 11, and Windows Server systems that still trust those aging boot...
bitlocker
enterprise it
firmware security
itadminchecklistitadministration
it management
it security
it security management
kb5089592
kb5092765
kb5096160
kb5096160 update
safe os dynamic update
secure boot
secure boot certificates
setup dynamic update
uefi certificates
uefi firmware
uefi trust chain
windows 10
windows 10 and 11
windows 11
windows 11 24h2
windows 11 26h1
windows 11 security
windows 11 servicing
windows recovery environment
windows security
windows servicing
windows update
winre recovery
winre update
wsus
Microsoft released KB5092765 on May 26, 2026, as a Setup Dynamic Update for Windows 11 versions 24H2 and 25H2, improving setup components while repeating its warning that Secure Boot certificates on most Windows devices begin expiring in June 2026 worldwide. The update itself is small, almost...