Microsoft has warned that the cryptographic roots underpinning UEFI Secure Boot on Windows devices will begin to expire in June 2026, forcing a global certificate update that every IT team and many end users must plan for now to avoid boot-level insecurities and loss of updateability.
Background...
2026 expiration
bitlocker
bootkit
certificate rollover
db
dbx
group policy
intune
kek
linux shim
mdm
oemfirmware
pre-boot security
recovery media
secure boot
uefi
vm
windows 11
windows server
windows update
Microsoft has published a non‑security preview update for Windows 11, version 23H2 — KB5064080 — delivered as an optional Release Preview package that bundles a set of targeted reliability fixes, a servicing‑stack refresh, and an enterprise‑facing capability that Microsoft calls Windows Backup...
ca certificates 2011
device management
enterprise it
file explorer
input ime
intune prerequisites
kb5064080
latest cumulative update
narrator
oemfirmware
refs
release preview
secure boot
servicing stack update
smb over quic
ssu + lcu packaging
windows 11
windows 11 23h2
windows backup for organizations
windows update policy
Microsoft released an out‑of‑band (OOB) non‑security update on August 19, 2025 — KB5066189 for Windows 11 (OS Builds 22621.5771 and 22631.5771) — to repair a regression introduced by August’s cumulative updates that can block device reset and recovery operations, and to deliver a servicing stack...
Microsoft’s upgrade machinery is currently offering Windows 11 24H2 to machines that, on paper, fail the company’s minimum security requirements — including systems with TPM 2.0 disabled — and multiple independent reports suggest this is happening to both consumer and enterprise devices...
Microsoft’s August cumulative update for Windows 11, version 24H2 — KB5063878 (OS Build 26100.4946) — ships as a combined Servicing Stack Update (SSU) plus Latest Cumulative Update (LCU), bringing routine security and quality fixes while renewing attention on an industry-wide operational...
Microsoft has shipped the August 12, 2025 cumulative security update for Windows 11, version 24H2 (KB5063878, OS Build 26100.4946), a routine Patch Tuesday release that combines the latest servicing stack update with the monthly cumulative update, patches a range of security issues, and contains...
Microsoft released the August 12, 2025 cumulative security update for Windows 11, version 24H2 — KB5063878 (OS Build 26100.4946) — a routine but important monthly package that bundles the latest cumulative fixes, updates to several AI components (targeted at Copilot+ devices), and an updated...
2026 expiration
24h2
ai components
air-gapped deployment
august 2025
certificate expiration
certificate expiry 2026
configmgr
copilot ai
copilot+
enterprise rollout
firmware updates
kb5063875
kb5063878
kek ca 2011
kek ca 2023
kek db updates
lcu
oem coordination
oemfirmware
os build 22621.5768
os build 26100.4946
patch tuesday
rollout testing
secure boot
secure boot certificates
servicing stack update
ssu
uefi ca 2011
windows 11
windows update
windows update for business
wsus
Enhancing TPM Reliability with the New Attestation Readiness Verifier
The evolution of security in Windows 11 takes a giant leap forward with the introduction of the attestation readiness verifier, a lightweight tool designed to rigorously assess the reliability of your Trusted Platform Module...