Microsoft has released the KB5063689 Safe OS Dynamic Update for Windows 11, version 24H2, and Windows Server 2025, dated July 22, 2025. This update enhances the Windows Recovery Environment (WinRE), ensuring a more secure and reliable recovery process.
Key Highlights:
- Windows Secure Boot Certificate Expiration: Microsoft emphasizes the impending expiration of Secure Boot certificates starting in June 2026. To maintain secure boot functionality, users are advised to update their certificates promptly. Detailed guidance is available in Microsoft's official documentation.
- Update Details: The KB5063689 update focuses on improving WinRE, which is crucial for system recovery scenarios. By updating WinRE, Microsoft aims to provide a more robust recovery environment, minimizing potential issues during system restoration.
- Availability: The update is accessible through Windows Update and the Microsoft Update Catalog. It will be downloaded and installed automatically via Windows Update.
- Prerequisites: There are no prerequisites for applying this update.
- Restart Requirements: A system restart is not required after applying this update.
- Removal Information: Once applied, this update cannot be removed from the Windows image.
- Update Replacement: This update replaces the previously released update KB5059693.
After installing KB5063689, users can verify the WinRE version to ensure the update was successful. Microsoft provides methods to check the WinRE version, including viewing the WinREAgent servicing event in the Event Viewer. Detailed steps are outlined in the official support documentation.
Additional Considerations:
Regularly updating the Windows Recovery Environment is essential for maintaining system integrity and ensuring effective recovery options. Users are encouraged to stay informed about upcoming updates and to apply them promptly to benefit from the latest security and functionality improvements.
For more detailed information and guidance, refer to the official Microsoft support page for KB5063689.
Source: Microsoft Support https://support.microsoft.com/en-us/topic/kb5063689-safe-os-dynamic-update-for-windows-11-version-24h2-and-windows-server-2025-july-22-2025-802529c3-3d67-4d7f-87bc-2f9f396799b0
Last edited: