Windows Secure Boot certificate expiration
Important: Secure Boot certificates used by most Windows devices are set to expire starting in June 2026. This might affect the ability of certain personal and business devices to boot securely if not updated in time. To avoid disruption, we recommend reviewing the guidance and taking action to update certificates in advance. For details and preparation steps, see Windows Secure Boot certificate expiration and CA updates.
Windows Server 2008 R2 Premium Assurance ended on January 13, 2026.
Windows Server 2008 R2 Extended Security Updates (ESU) ended on January 10, 2023. Additionally, Extended Security Updates on Azure only support ended on January 9, 2024. For more information, see Extended Security Updates for Windows Server overview.
We recommend that you upgrade to a later version of Windows Server. For more information, see Overview of Windows Server upgrades.
Summary
This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. Servicing stack updates (SSU) makes sure that you have a robust and reliable servicing stack so that your devices can receive and install Microsoft updates.
| Servicing Stack Update (SSU) Guidance for ESU and Azure-Hosted Devices This servicing stack update (SSU) introduces enhanced logic to verify whether a device is hosted in Azure, leveraging an updated certificate chain for validation. To ensure seamless installation of future updates on Azure-hosted devices, it is strongly recommended to install this latest SSU prior to applying any additional updates. Key Requirements for IT Admins Certificate Access Ensure that the device can access the required certificate update domains to successfully download and install certificate updates. For more information, see the following resources: Intermediate Certificate Change An intermediate certificate change will soon be deployed across Azure regions. Before applying updates, verify that your environment is prepared for this change. For guidance, see: ESU Validation Check To confirm whether your machines are eligible for Extended Security Updates (ESU), IT admins should validate the following:
|
|---|
Important Not installing the latest SSU before applying Windows updates might result in the Windows update not being offered until the latest SSU is installed.
How to get this update
Install this update
To install this update, use one of the following release channels.
| Available | Next Step |
|---|---|
|
This update is available through Windows Update. It will be downloaded and installed automatically. |
| Prerequisites | There are no prerequisites to apply this update. |
|---|---|
| Restart information | You must restart your device after you apply this update. |
| Removal information | Servicing stack updates (SSUs) make changes to how updates are installed and cannot be uninstalled from the device. |
| Update replacement information | This update replaces the previously released update KB5056456. |
File Information
The English (United States) version of this software update installs files that have the following attributes. This update might contain files for additional languages.
For all supported x86-based versions
| File name | File version | Date | Time | File size |
|---|---|---|---|---|
| mofinstall.dll | 6.1.7601.28021 | 27-Oct-25 | 22:03 | 59,392 |
| esscli.dll | 6.1.7601.28021 | 27-Oct-25 | 22:03 | 266,240 |
| mofd.dll | 6.1.7601.28021 | 27-Oct-25 | 22:03 | 193,536 |
| repdrvfs.dll | 6.1.7601.28021 | 27-Oct-25 | 22:03 | 302,080 |
| fastprox.dll | 6.1.7601.28021 | 27-Oct-25 | 22:03 | 606,720 |
| wbemcomn.dll | 6.1.7601.28021 | 27-Oct-25 | 22:03 | 363,520 |
| wbemcore.dll | 6.1.7601.28021 | 27-Oct-25 | 22:03 | 774,656 |
| wmiutils.dll | 6.1.7601.28021 | 27-Oct-25 | 22:03 | 85,504 |
| wbemprox.dll | 6.1.7601.28021 | 27-Oct-25 | 22:03 | 29,184 |
| xmllite.dll | 1.3.1001.0 | 27-Oct-25 | 22:03 | 180,736 |
| wdscore.dll | 6.1.7601.28021 | 27-Oct-25 | 22:03 | 190,464 |
| CntrtextInstaller.dll | 6.1.7601.28021 | 27-Oct-25 | 22:03 | 143,872 |
| drvstore.dll | 6.1.7601.28021 | 27-Oct-25 | 22:03 | 324,096 |
| dpx.dll | 6.1.7601.28021 | 27-Oct-25 | 22:03 | 257,024 |
| msdelta.dll | 6.1.7601.28021 | 27-Oct-25 | 22:03 | 305,664 |
| mspatcha.dll | 6.1.7601.28021 | 27-Oct-25 | 22:03 | 35,328 |
| PkgMgr.exe | 6.1.7601.28021 | 27-Oct-25 | 21:19 | 209,920 |
| cmiv2.dll | 6.1.7601.28021 | 27-Oct-25 | 22:03 | 2,046,464 |
| cmitrust.dll | 6.1.7601.28021 | 27-Oct-25 | 22:03 | 297,472 |
| locdrv.dll | 6.1.7601.28021 | 27-Oct-25 | 22:03 | 228,352 |
| WcmTypes.xsd | Not versioned | 27-Oct-25 | 19:29 | 1,047 |
| helpcins.dll | 6.1.7601.28021 | 27-Oct-25 | 22:03 | 105,472 |
| OEMHelpIns.dll | 6.1.7601.28021 | 27-Oct-25 | 22:03 | 151,552 |
| apds.dll | 6.1.7601.28021 | 27-Oct-25 | 22:03 | 1,799,168 |
| apss.dll | 6.1.7601.28021 | 27-Oct-25 | 22:03 | 201,216 |
| apircl.dll | 6.1.7601.28021 | 27-Oct-25 | 22:03 | 223,744 |
| CbsMsg.dll | 6.1.7601.28021 | 27-Oct-25 | 21:19 | 28,672 |
| CbsCore.dll | 6.1.7601.28021 | 27-Oct-25 | 22:03 | 846,336 |
| DrUpdate.dll | 6.1.7601.28021 | 27-Oct-25 | 22:03 | 174,080 |
| wrpint.dll | 6.1.7601.28021 | 27-Oct-25 | 21:18 | 54,272 |
| wcp.dll | 6.1.7601.28021 | 27-Oct-25 | 22:03 | 1,913,344 |
| cmiadapter.dll | 6.1.7601.28021 | 27-Oct-25 | 22:03 | 120,832 |
| smiengine.dll | 6.1.7601.28021 | 27-Oct-25 | 22:03 | 697,856 |
| smipi.dll | 6.1.7601.28021 | 27-Oct-25 | 22:03 | 98,816 |
| GlobalInstallOrder.xml | Not versioned | 27-Oct-25 | 19:23 | 1,977,464 |
| poqexec.exe | 6.1.7601.28021 | 27-Oct-25 | 21:19 | 123,904 |
| x86_installed | Not versioned | 27-Oct-25 | 19:24 | 9 |
| SvcIni.exe | 6.1.7601.28021 | 27-Oct-25 | 21:19 | 16,384 |
| wmicmiplugin.dll | 6.1.7601.28021 | 27-Oct-25 | 22:03 | 351,744 |
| ExtendedSecurityUpdatesAI.dll | 6.1.7601.28021 | 27-Oct-25 | 21:19 | 149,504 |
For all supported x64-based versions
| File name | File version | Date | Time | File size |
|---|---|---|---|---|
| mofinstall.dll | 6.1.7601.28021 | 27-Oct-25 | 22:07 | 76,800 |
| esscli.dll | 6.1.7601.28021 | 27-Oct-25 | 22:07 | 440,320 |
| mofd.dll | 6.1.7601.28021 | 27-Oct-25 | 22:07 | 280,064 |
| repdrvfs.dll | 6.1.7601.28021 | 27-Oct-25 | 22:07 | 454,144 |
| fastprox.dll | 6.1.7601.28021 | 27-Oct-25 | 22:07 | 909,824 |
| wbemcomn.dll | 6.1.7601.28021 | 27-Oct-25 | 22:07 | 529,920 |
| wbemcore.dll | 6.1.7601.28021 | 27-Oct-25 | 22:07 | 1,220,096 |
| wmiutils.dll | 6.1.7601.28021 | 27-Oct-25 | 22:07 | 137,216 |
| wbemprox.dll | 6.1.7601.28021 | 27-Oct-25 | 22:07 | 43,520 |
| xmllite.dll | 1.3.1001.0 | 27-Oct-25 | 22:07 | 198,656 |
| wdscore.dll | 6.1.7601.28021 | 27-Oct-25 | 22:07 | 271,872 |
| CntrtextInstaller.dll | 6.1.7601.28021 | 27-Oct-25 | 22:07 | 171,008 |
| drvstore.dll | 6.1.7601.28021 | 27-Oct-25 | 22:07 | 423,936 |
| dpx.dll | 6.1.7601.28021 | 27-Oct-25 | 22:07 | 399,872 |
| msdelta.dll | 6.1.7601.28021 | 27-Oct-25 | 22:07 | 452,096 |
| mspatcha.dll | 6.1.7601.28021 | 27-Oct-25 | 22:07 | 46,592 |
| PkgMgr.exe | 6.1.7601.28021 | 27-Oct-25 | 21:22 | 199,168 |
| cmiv2.dll | 6.1.7601.28021 | 27-Oct-25 | 22:07 | 3,749,888 |
| cmitrust.dll | 6.1.7601.28021 | 27-Oct-25 | 22:07 | 479,232 |
| locdrv.dll | 6.1.7601.28021 | 27-Oct-25 | 22:07 | 370,176 |
| WcmTypes.xsd | Not versioned | 27-Oct-25 | 19:29 | 1,047 |
| helpcins.dll | 6.1.7601.28021 | 27-Oct-25 | 22:07 | 142,336 |
| OEMHelpIns.dll | 6.1.7601.28021 | 27-Oct-25 | 22:07 | 222,720 |
| apds.dll | 6.1.7601.28021 | 27-Oct-25 | 22:07 | 2,174,464 |
| apss.dll | 6.1.7601.28021 | 27-Oct-25 | 22:07 | 235,520 |
| apircl.dll | 6.1.7601.28021 | 27-Oct-25 | 22:07 | 276,992 |
| CbsMsg.dll | 6.1.7601.28021 | 27-Oct-25 | 22:07 | 28,672 |
| CbsCore.dll | 6.1.7601.28021 | 27-Oct-25 | 22:07 | 977,408 |
| DrUpdate.dll | 6.1.7601.28021 | 27-Oct-25 | 22:07 | 204,288 |
| wrpint.dll | 6.1.7601.28021 | 27-Oct-25 | 22:07 | 60,928 |
| wcp.dll | 6.1.7601.28021 | 27-Oct-25 | 22:07 | 2,763,264 |
| cmiadapter.dll | 6.1.7601.28021 | 27-Oct-25 | 22:07 | 125,952 |
| smiengine.dll | 6.1.7601.28021 | 27-Oct-25 | 22:07 | 934,400 |
| smipi.dll | 6.1.7601.28021 | 27-Oct-25 | 22:07 | 104,448 |
| GlobalInstallOrder.xml | Not versioned | 27-Oct-25 | 19:24 | 1,977,464 |
| poqexec.exe | 6.1.7601.28021 | 27-Oct-25 | 21:22 | 142,336 |
| amd64_installed | Not versioned | 27-Oct-25 | 19:24 | 9 |
| SvcIni.exe | 6.1.7601.28021 | 27-Oct-25 | 21:22 | 17,920 |
| wmicmiplugin.dll | 6.1.7601.28021 | 27-Oct-25 | 22:07 | 525,824 |
| ExtendedSecurityUpdatesAI.dll | 6.1.7601.28021 | 27-Oct-25 | 21:22 | 189,952 |
| mofinstall.dll | 6.1.7601.28021 | 27-Oct-25 | 22:03 | 59,392 |
| esscli.dll | 6.1.7601.28021 | 27-Oct-25 | 22:03 | 266,240 |
| mofd.dll | 6.1.7601.28021 | 27-Oct-25 | 22:03 | 193,536 |
| repdrvfs.dll | 6.1.7601.28021 | 27-Oct-25 | 22:03 | 302,080 |
| fastprox.dll | 6.1.7601.28021 | 27-Oct-25 | 22:03 | 606,720 |
| wbemcomn.dll | 6.1.7601.28021 | 27-Oct-25 | 22:03 | 363,520 |
| wbemcore.dll | 6.1.7601.28021 | 27-Oct-25 | 22:03 | 774,656 |
| wmiutils.dll | 6.1.7601.28021 | 27-Oct-25 | 22:03 | 85,504 |
| wbemprox.dll | 6.1.7601.28021 | 27-Oct-25 | 22:03 | 29,184 |
| xmllite.dll | 1.3.1001.0 | 27-Oct-25 | 22:03 | 180,736 |
| wdscore.dll | 6.1.7601.28021 | 27-Oct-25 | 22:03 | 190,464 |
| CntrtextInstaller.dll | 6.1.7601.28021 | 27-Oct-25 | 22:03 | 143,872 |
| drvstore.dll | 6.1.7601.28021 | 27-Oct-25 | 22:03 | 324,096 |
| dpx.dll | 6.1.7601.28021 | 27-Oct-25 | 22:03 | 257,024 |
| msdelta.dll | 6.1.7601.28021 | 27-Oct-25 | 22:03 | 305,664 |
| mspatcha.dll | 6.1.7601.28021 | 27-Oct-25 | 22:03 | 35,328 |
| PkgMgr.exe | 6.1.7601.28021 | 27-Oct-25 | 21:19 | 209,920 |
| cmiv2.dll | 6.1.7601.28021 | 27-Oct-25 | 22:03 | 2,046,464 |
| cmitrust.dll | 6.1.7601.28021 | 27-Oct-25 | 22:03 | 297,472 |
| locdrv.dll | 6.1.7601.28021 | 27-Oct-25 | 22:03 | 228,352 |
| helpcins.dll | 6.1.7601.28021 | 27-Oct-25 | 22:03 | 105,472 |
| OEMHelpIns.dll | 6.1.7601.28021 | 27-Oct-25 | 22:03 | 151,552 |
| apds.dll | 6.1.7601.28021 | 27-Oct-25 | 22:03 | 1,799,168 |
| apss.dll | 6.1.7601.28021 | 27-Oct-25 | 22:03 | 201,216 |
| apircl.dll | 6.1.7601.28021 | 27-Oct-25 | 22:03 | 223,744 |
| CbsMsg.dll | 6.1.7601.28021 | 27-Oct-25 | 21:19 | 28,672 |
| CbsCore.dll | 6.1.7601.28021 | 27-Oct-25 | 22:03 | 846,336 |
| DrUpdate.dll | 6.1.7601.28021 | 27-Oct-25 | 22:03 | 174,080 |
| wrpint.dll | 6.1.7601.28021 | 27-Oct-25 | 21:18 | 54,272 |
| wcp.dll | 6.1.7601.28021 | 27-Oct-25 | 22:03 | 1,913,344 |
| cmiadapter.dll | 6.1.7601.28021 | 27-Oct-25 | 22:03 | 120,832 |
| smiengine.dll | 6.1.7601.28021 | 27-Oct-25 | 22:03 | 697,856 |
| smipi.dll | 6.1.7601.28021 | 27-Oct-25 | 22:03 | 98,816 |
| GlobalInstallOrder.xml | Not versioned | 27-Oct-25 | 19:23 | 1,977,464 |
| poqexec.exe | 6.1.7601.28021 | 27-Oct-25 | 21:19 | 123,904 |
| x86_installed | Not versioned | 27-Oct-25 | 19:24 | 9 |
| SvcIni.exe | 6.1.7601.28021 | 27-Oct-25 | 21:19 | 16,384 |
| wmicmiplugin.dll | 6.1.7601.28021 | 27-Oct-25 | 22:03 | 351,744 |
| ExtendedSecurityUpdatesAI.dll | 6.1.7601.28021 | 27-Oct-25 | 21:19 | 149,504 |
References
Servicing Stack Updates (SSU): Frequently Asked Questions
Description of the standard terminology that is used to describe Microsoft software updates