Applies To
Windows Server 2022

Windows Secure Boot certificate expiration 

Important: Secure Boot certificates used by most Windows devices are set to expire starting in June 2026. This might affect the ability of certain personal and business devices to boot securely if not updated in time. To avoid disruption, we recommend reviewing the guidance and taking action to update certificates in advance. For details and preparation steps, see Windows Secure Boot certificate expiration and CA updates.

Support for Windows Server 2022 will end in October 2031

After October 14, 2031, Microsoft will no longer provide free software updates from Windows Update, technical assistance, or security fixes for Windows Server 2022. We recommend that you upgrade to a later version of Windows Server.

Summary

This update makes improvements to the Windows recovery environment (WinRE).

How to get this update

Install this update

To install this update, use one of the following release channels.

Available

Next step

Available

This update is available through Windows Update. It will be downloaded and installed automatically.

Prerequisites

There are no prerequisites to apply this update.

Restart information

You do not have to restart your device after you apply this update.

Removal information

This update cannot be removed once it is applied to a Windows image.

Update replacement information

This update replaces the previously released update KB5068792.

Verify the installation of this update

After installing this update, the WinRE version installed on the device should be 10.0.20348.4523.

To get the version of WinRE installed, run the following PowerShell script "GetWinReVersion.ps1" with Administrator credentials. After you run the script, you should receive the installed WinRE version as in the following example:

GetWinReVersion.ps1 PowerShell script

################################################################################################

#

# Copyright (c) Microsoft Corporation.

# Licensed under the MIT License.

#

# THE SOFTWARE IS PROVIDED *AS IS*, WITHOUT WARRANTY OF ANY KIND, EXPRESS OR

# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,

# FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE

# AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER

# LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,

# OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE

# SOFTWARE.

#

################################################################################################
# Function to get WinRE path

function GetWinREPath {

    $WinRELocation = (reagentc /info | Select-String "Windows RE location")

    if ($WinRELocation) {

        return $WinRELocation.ToString().Split(':')[-1].Trim()

    } else {

        Write-Host "Failed to find WinRE path" -ForegroundColor Red

        exit 1

    }

}

 
# Creates and needs to be return the mount directory
function GetMountDir {
    # systemdirve\mnt
    $MountDir = "$env:SystemDrive\mnt"
    if (-not (Test-Path $MountDir)) {
        New-Item -ItemType Directory -Path $MountDir -Force | Out-Null
    }
    return $MountDir
}  

# Function to get WinRE version
function GetWinREVersion {

    $mountedPath = GetMountDir
    $filePath = "$mountedPath\Windows\System32\winpeshl.exe"

    $WinREVersion = (Get-Item $filePath).VersionInfo.FileVersionRaw.Revision

    return [int]$WinREVersion

}


# Main Execution

$WinREPath = GetWinREPath


# Make dir C:\mnt if not exists

$TempDir = GetMountDir


# Get the read write permission for this directory

if (-not (Test-Path $TempDir)) {

    New-Item -ItemType Directory -Path $TempDir -Force | Out-Null

}


# Mount WinRE image

dism /Mount-Image /ImageFile:"$WinREPath\winre.wim" /Index:1 /MountDir:"$TempDir"


$WinREVersion = GetWinREVersion

Write-Host "WinRE Version: $WinREVersion" -ForegroundColor Cyan

dism /Unmount-Image /MountDir:"$TempDir" /Discard

Remove-Item -Path $TempDir -Force -Recurse

File information

The English (United States) version of this software update installs files that have the following attributes. This update might contain files for additional languages.

File name

File version

Date

Time

File size

usb.inf

Not versioned

16-Nov-25

17:06

41,484

usbccgp.sys

10.0.20348.4523

16-Nov-25

17:06

222,624

usbhub3.inf

Not versioned

16-Nov-25

17:06

11,162

USBHUB3.SYS

10.0.20348.4523

16-Nov-25

17:06

697,760

usbport.inf

Not versioned

16-Nov-25

17:06

77,558

usbohci.sys

10.0.20348.4523

16-Nov-25

17:06

61,440

usbport.sys

10.0.20348.4523

16-Nov-25

17:06

505,288

usbhub.sys

10.0.20348.4523

16-Nov-25

17:06

554,440

usbehci.sys

10.0.20348.4523

16-Nov-25

17:06

116,168

usbuhci.sys

10.0.20348.4523

16-Nov-25

17:06

69,632

usbd.sys

10.0.20348.4523

16-Nov-25

17:06

67,016

skci.dll

10.0.20348.4523

16-Nov-25

17:06

315,496

conhost.exe

10.0.20348.4523

16-Nov-25

17:06

987,136

iumbase.dll

10.0.20348.4523

16-Nov-25

17:06

46,944

iumdll.dll

10.0.20348.4523

16-Nov-25

17:06

38,680

vertdll.dll

10.0.20348.4523

16-Nov-25

17:06

199,824

ucrtbase_enclave.dll

10.0.20348.4523

16-Nov-25

17:06

563,440

securekernel.exe

10.0.20348.4523

16-Nov-25

17:06

1,070,536

VbsSiPolicy.p7b

Not versioned

16-Nov-25

17:06

68,351

winresume.exe

10.0.20348.4523

16-Nov-25

17:06

1,282,568

winresume.efi

10.0.20348.4523

16-Nov-25

17:06

1,956,632

winload.exe

10.0.20348.4523

16-Nov-25

17:06

1,647,240

winload.efi

10.0.20348.4523

16-Nov-25

17:06

2,396,232

bootmgfw.efi

10.0.20348.4523

16-Nov-25

17:06

2,044,320

bootmgfw_EX.efi

10.0.26100.30212

16-Nov-25

17:06

2,830,632

SecureBootRecovery.efi

Not versioned

16-Nov-25

17:06

162,688

bootmgr.efi

10.0.20348.4523

16-Nov-25

17:06

2,027,936

bootmgr_EX.efi

10.0.26100.30212

16-Nov-25

17:06

2,818,464

boot.stl

Not versioned

16-Nov-25

17:06

11,030

winsipolicy.p7b

Not versioned

16-Nov-25

17:06

9,796

BootMenuUX.dll

10.0.20348.4523

16-Nov-25

17:06

229,376

driversipolicy.p7b

Not versioned

16-Nov-25

17:06

229,162

ci.dll

10.0.20348.4523

16-Nov-25

17:06

968,392

driver.stl

Not versioned

16-Nov-25

17:06

33,360

cmi2migxml.dll

10.0.20348.4523

16-Nov-25

17:06

230,816

csiagent.dll

10.0.20348.4523

16-Nov-25

17:06

718,240

diagER.dll

10.0.20348.4523

16-Nov-25

17:06

79,264

hwcompat.dll

10.0.20348.4523

16-Nov-25

17:06

251,296

hwcompat.txt

Not versioned

16-Nov-25

17:06

780,048

hwexclude.txt

Not versioned

16-Nov-25

17:06

51

migapp.xml

Not versioned

16-Nov-25

17:06

654,548

migcore.dll

10.0.20348.4523

16-Nov-25

17:06

9,741,728

mighost.exe

10.0.20348.4523

16-Nov-25

17:06

279,968

migres.dll

10.0.20348.4523

16-Nov-25

17:06

26,016

migisol.dll

10.0.20348.4523

16-Nov-25

17:06

148,896

migstore.dll

10.0.20348.4523

16-Nov-25

17:06

1,320,352

migsys.dll

10.0.20348.4523

16-Nov-25

17:06

456,096

MXEAgent.dll

10.0.20348.4523

16-Nov-25

17:06

374,176

offline.xml

Not versioned

16-Nov-25

17:06

40,820

oscomps.xml

Not versioned

16-Nov-25

17:06

435,175

oscomps.woa.xml

Not versioned

16-Nov-25

17:06

249,101

osfilter.inf

Not versioned

16-Nov-25

17:06

21,299

pnppropmig.dll

10.0.20348.4523

16-Nov-25

17:06

103,880

reagent.dll

10.0.20348.4523

16-Nov-25

17:06

759,240

ReserveManager.dll

10.0.20348.4523

16-Nov-25

17:06

320,928

setupplatform.cfg

Not versioned

16-Nov-25

17:06

6,371

setupplatform.dll

1.64.20348.4523

16-Nov-25

17:06

9,278,880

setupplatform.exe

1.64.20348.4523

16-Nov-25

17:06

202,184

SFCN.dat

Not versioned

16-Nov-25

17:06

1,824

SFLCID.dat

Not versioned

16-Nov-25

17:06

1,644

SFLISTW7.dat

Not versioned

16-Nov-25

17:06

1,703,368

SFLISTW8.dat

Not versioned

16-Nov-25

17:06

2,608,858

SFLISTWB.dat

Not versioned

16-Nov-25

17:06

3,172,904

SFLISTWT.dat

Not versioned

16-Nov-25

17:06

4,935,438

sflistw8.woa.dat

Not versioned

16-Nov-25

17:06

954,436

SFLISTRS1.dat

Not versioned

16-Nov-25

17:06

5,593,408

sflistwb.woa.dat

Not versioned

16-Nov-25

17:06

1,150,134

sflistwt.woa.dat

Not versioned

16-Nov-25

17:06

2,636,850

SFPAT.inf

Not versioned

16-Nov-25

17:06

11,602

SFPATW7.inf

Not versioned

16-Nov-25

17:06

17,396

SFPATW8.inf

Not versioned

16-Nov-25

17:06

79,818

SFPATWB.inf

Not versioned

16-Nov-25

17:06

91,635

SFPATWT.inf

Not versioned

16-Nov-25

17:06

165,729

SFPATRS1.inf

Not versioned

16-Nov-25

17:06

169,870

unbcl.dll

10.0.20348.4523

16-Nov-25

17:06

1,205,704

upgradeagent.dll

10.0.20348.4523

16-Nov-25

17:06

3,286,472

upgradeagent.xml

Not versioned

16-Nov-25

17:06

70,907

upgrade_comp.xml

Not versioned

16-Nov-25

17:06

6,054

upgrade_bulk.xml

Not versioned

16-Nov-25

17:06

211,052

upgrade_data.xml

Not versioned

16-Nov-25

17:06

41,750

upgrade_frmwrk.xml

Not versioned

16-Nov-25

17:06

18,614

upgWow_bulk.xml

Not versioned

16-Nov-25

17:06

114,963

uninstall.xml

Not versioned

16-Nov-25

17:06

4,407

uninstall_data.xml

Not versioned

16-Nov-25

17:06

11,122

wdsutil.dll

10.0.20348.4523

16-Nov-25

17:06

353,696

iertutil.dll

11.0.20348.4523

16-Nov-25

17:06

2,856,680

msIso.dll

11.0.20348.4523

16-Nov-25

17:06

290,816

edgeIso.dll

11.0.20348.4523

16-Nov-25

17:06

487,424

ClipSp.sys

10.0.20348.4523

16-Nov-25

17:06

1,127,840

dxgkrnl.sys

10.0.20348.4523

16-Nov-25

17:06

4,531,616

cdd.dll

10.0.20348.4523

16-Nov-25

17:06

270,336

dxgmms1.sys

10.0.20348.4523

16-Nov-25

17:06

521,632

dxgmms2.sys

10.0.20348.4523

16-Nov-25

17:06

1,045,920

dxgkrnl.sys.mui

10.0.20348.4523

16-Nov-25

17:06

109,056

dxgmms2.sys.mui

10.0.20348.4523

16-Nov-25

17:06

5,120

dxgmms2.sys.mui

10.0.20348.4523

16-Nov-25

17:06

5,632

dxgkrnl.sys.mui

10.0.20348.4523

16-Nov-25

17:06

110,592

dxgkrnl.sys.mui

10.0.20348.4523

16-Nov-25

17:06

110,080

dxgkrnl.sys.mui

10.0.20348.4523

16-Nov-25

17:06

108,032

dxgmms2.sys.mui

10.0.20348.4523

16-Nov-25

17:06

4,608

dxgkrnl.sys.mui

10.0.20348.4523

16-Nov-25

17:06

107,520

lsasrv.dll

10.0.20348.4523

16-Nov-25

17:06

1,638,400

lsaadt.dll

10.0.20348.4523

16-Nov-25

17:06

217,088

ksecpkg.sys

10.0.20348.4523

16-Nov-25

17:06

214,472

offlinelsa.dll

10.0.20348.4523

16-Nov-25

17:06

157,088

netio.sys

10.0.20348.4523

16-Nov-25

17:06

656,840

ntdll.dll

10.0.20348.4523

16-Nov-25

17:06

2,108,808

ntoskrnl.exe

10.0.20348.4523

16-Nov-25

17:06

11,597,216

ntkrla57.exe

10.0.20348.4523

16-Nov-25

17:06

11,105,736

rpcrt4.dll

10.0.20348.4523

16-Nov-25

17:06

1,195,640

diagtrack.dll

10.0.10586.0

16-Nov-25

17:06

1,365,856

diagtrackrunner.exe

10.0.10586.0

16-Nov-25

17:06

88,256

reagent.admx

Not versioned

16-Nov-25

17:06

1,240

reagent.xml

Not versioned

16-Nov-25

17:06

837

SetupPlatform.cfg

Not versioned

16-Nov-25

17:06

11,803

wdsclientapi.dll

10.0.20348.4523

16-Nov-25

17:06

334,200

wdscore.dll

10.0.20348.4523

16-Nov-25

17:06

279,968

wdscsl.dll

10.0.20348.4523

16-Nov-25

17:06

124,320

wdsimage.dll

10.0.20348.4523

16-Nov-25

17:06

1,038,712

wdstptc.dll

10.0.20348.4523

16-Nov-25

17:06

760,184

fvevol.sys

10.0.20348.4523

16-Nov-25

17:06

861,600

dumpfve.sys

10.0.20348.4523

16-Nov-25

17:06

129,560

fveapibase.dll

10.0.20348.4523

16-Nov-25

17:06

450,560

fveapi.dll

10.0.20348.4523

16-Nov-25

17:06

1,093,632

schannel.dll

10.0.20348.4523

16-Nov-25

17:06

659,456

ResetEngine.dll

10.0.20348.4523

16-Nov-25

17:06

2,299,296

ResetEngine.exe

10.0.20348.4523

16-Nov-25

17:06

38,304

ResetPluginHost.exe

10.0.20348.4523

16-Nov-25

17:06

53,248

reseteng.dll

10.0.20348.4523

16-Nov-25

17:06

679,936

resetengmig.dll

10.0.20348.4523

16-Nov-25

17:06

106,496

srms.dat

Not versioned

16-Nov-25

17:06

59,554

srms62.dat

Not versioned

16-Nov-25

17:06

22,841

sysreset.exe

10.0.20348.4523

16-Nov-25

17:06

372,736

systemreset.exe

10.0.20348.4523

16-Nov-25

17:06

538,624

ResetEngOnline.dll

10.0.20348.4523

16-Nov-25

17:06

221,184

SysResetErr.exe

10.0.20348.4523

16-Nov-25

17:06

71,072

tcpip.sys

10.0.20348.4523

16-Nov-25

17:06

3,216,800

FWPKCLNT.SYS

10.0.20348.4523

16-Nov-25

17:06

542,112

tcpipreg.sys

10.0.20348.4523

16-Nov-25

17:06

77,824

tcpip.sys.mui

10.0.20348.4523

16-Nov-25

17:06

207,872

tcpip.sys.mui

10.0.20348.4523

16-Nov-25

17:06

212,992

tcpip.sys.mui

10.0.20348.4523

16-Nov-25

17:06

209,920

tcpip.sys.mui

10.0.20348.4523

16-Nov-25

17:06

209,408

tcpip.sys.mui

10.0.20348.4523

16-Nov-25

17:06

210,944

tcpip.sys.mui

10.0.20348.4523

16-Nov-25

17:06

211,968

tcpip.sys.mui

10.0.20348.4523

16-Nov-25

17:06

206,336

tcpip.sys.mui

10.0.20348.4523

16-Nov-25

17:06

205,312

tcpip.sys.mui

10.0.20348.4523

16-Nov-25

17:06

211,456

tcpip.sys.mui

10.0.20348.4523

16-Nov-25

17:06

200,704

tcpip.sys.mui

10.0.20348.4523

16-Nov-25

17:06

200,192

tcpip.sys.mui

10.0.20348.4523

16-Nov-25

17:06

208,384

tcpip.sys.mui

10.0.20348.4523

16-Nov-25

17:06

208,896

tcpip.sys.mui

10.0.20348.4523

16-Nov-25

17:06

207,360

tcpip.sys.mui

10.0.20348.4523

16-Nov-25

17:06

210,432

tcpip.sys.mui

10.0.20348.4523

16-Nov-25

17:06

198,144

tcpip.sys.mui

10.0.20348.4523

16-Nov-25

17:06

198,656

win32u.dll

10.0.20348.4523

16-Nov-25

17:06

166,768

win32k.sys

10.0.20348.4523

16-Nov-25

17:06

684,032

win32kfull.sys

10.0.20348.4523

16-Nov-25

17:06

3,825,664

win32kbase.sys

10.0.20348.4523

16-Nov-25

17:06

2,887,680

win32kbase.sys.mui

10.0.20348.4523

16-Nov-25

17:06

19,968

win32kbase.sys.mui

10.0.20348.4523

16-Nov-25

17:06

22,528

win32kbase.sys.mui

10.0.20348.4523

16-Nov-25

17:06

21,504

win32kbase.sys.mui

10.0.20348.4523

16-Nov-25

17:06

23,040

win32kbase.sys.mui

10.0.20348.4523

16-Nov-25

17:06

20,480

win32kbase.sys.mui

10.0.20348.4523

16-Nov-25

17:06

20,992

win32kbase.sys.mui

10.0.20348.4523

16-Nov-25

17:06

19,456

win32kbase.sys.mui

10.0.20348.4523

16-Nov-25

17:06

22,016

win32kbase.sys.mui

10.0.20348.4523

16-Nov-25

17:06

17,408

win32kbase.sys.mui

10.0.20348.4523

16-Nov-25

17:06

16,896

win32kbase.sys.mui

10.0.20348.4523

16-Nov-25

17:06

15,360

WindowsCodecs.dll

10.0.20348.4523

16-Nov-25

17:06

1,782,400

winpeshl.exe

10.0.20348.4523

16-Nov-25

17:06

90,112

wpeutil.dll

10.0.20348.4523

16-Nov-25

17:06

159,744

wpeutil.exe

10.0.20348.4523

16-Nov-25

17:06

32,768

wpeinit.exe

10.0.20348.4523

16-Nov-25

17:06

57,344

startnet.cmd

Not versioned

16-Nov-25

17:06

9

ReAgent.dll

10.0.20348.4523

16-Nov-25

17:06

759,200

ReInfo.dll

10.0.20348.4523

16-Nov-25

17:06

61,440

StartRep.exe

10.0.20348.4523

16-Nov-25

17:06

647,168

RecEnv.exe

10.0.20348.4523

16-Nov-25

17:06

423,328

BootRec.exe

10.0.20348.4523

16-Nov-25

17:06

192,512

iertutil.dll

11.0.20348.4523

16-Nov-25

17:06

2,296,480

msIso.dll

11.0.20348.4523

16-Nov-25

17:06

217,600

edgeIso.dll

11.0.20348.4523

16-Nov-25

17:06

403,968

offlinelsa.dll

10.0.20348.4523

16-Nov-25

17:06

118,216

ntdll.dll

10.0.20348.4523

16-Nov-25

17:06

1,722,704

rpcrt4.dll

10.0.20348.4523

16-Nov-25

17:06

771,184

fveapibase.dll

10.0.20348.4523

16-Nov-25

17:06

365,568

fveapi.dll

10.0.20348.4523

16-Nov-25

17:06

842,240

schannel.dll

10.0.20348.4523

16-Nov-25

17:06

522,240

win32u.dll

10.0.20348.4523

16-Nov-25

17:06

102,336

win32k.sys

10.0.20348.4523

16-Nov-25

17:06

370,176

win32kfull.sys

10.0.20348.4523

16-Nov-25

17:06

2,787,328

WindowsCodecs.dll

10.0.20348.4523

16-Nov-25

17:06

1,450,368

ReAgent.dll

10.0.20348.4523

16-Nov-25

17:06

633,248

ReInfo.dll

10.0.20348.4523

16-Nov-25

17:06

30,208

wdsnbp.com

Not versioned

16-Nov-25

17:06

30,832

abortpxe.com

Not versioned

16-Nov-25

17:06

79

bootmgr.exe

10.0.20348.4523

16-Nov-25

17:06

721,824

pxeboot.com

Not versioned

16-Nov-25

17:06

25,358

pxeboot.n12

Not versioned

16-Nov-25

17:06

25,358

hdlscom1.com

Not versioned

16-Nov-25

17:06

25,662

hdlscom2.com

Not versioned

16-Nov-25

17:06

25,662

hdlscom1.n12

Not versioned

16-Nov-25

17:06

25,646

hdlscom2.n12

Not versioned

16-Nov-25

17:06

25,646

bootmgfw.efi

10.0.20348.4523

16-Nov-25

17:06

1,386,912

bootmgfw_EX.efi

10.0.26100.30212

16-Nov-25

17:06

2,376,464

References

Description of the standard terminology that is used to describe Microsoft software updates

Query words: safeos du

Need more help?

Want more options?

Explore subscription benefits, browse training courses, learn how to secure your device, and more.