Applies To
Windows 11 version 26H1, all editions

Windows Secure Boot certificate expiration 

Important: Secure Boot certificates used by most Windows devices are set to expire starting in June 2026. This might affect the ability of certain personal and business devices to boot securely if not updated in time. To avoid disruption, we recommend reviewing the guidance and taking action to update certificates in advance. For details and preparation steps, see Windows Secure Boot certificate expiration and CA updates.

Summary

This update makes improvements to the Windows recovery environment (WinRE).

How to get this update

Install this update

To install this update, use one of the following release channels.

Available

Next step

Available

This update is available through Windows Update. It will be downloaded and installed automatically.

Prerequisites

There are no prerequisites to apply this update.

Restart information

You do not have to restart your device after you apply this update.

Removal information

This update cannot be removed once it is applied to a Windows image.

Update replacement information

This update does not replace any previously released update.

Verify the installation of this update

After installing this update, the WinRE version installed on the device should be 10.0.28000.1574.

To get the version of WinRE installed, run the following PowerShell script "GetWinReVersion.ps1" with Administrator credentials. After you run the script, you should receive the installed WinRE version as in the following example:

GetWinReVersion.ps1 PowerShell script

################################################################################################

#

# Copyright (c) Microsoft Corporation.

# Licensed under the MIT License.

#

# THE SOFTWARE IS PROVIDED *AS IS*, WITHOUT WARRANTY OF ANY KIND, EXPRESS OR

# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,

# FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE

# AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER

# LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,

# OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE

# SOFTWARE.

#

################################################################################################
# Function to get WinRE path

function GetWinREPath {

    $WinRELocation = (reagentc /info | Select-String "Windows RE location")

    if ($WinRELocation) {

        return $WinRELocation.ToString().Split(':')[-1].Trim()

    } else {

        Write-Host "Failed to find WinRE path" -ForegroundColor Red

        exit 1

    }

}

 
# Creates and needs to be return the mount directory
function GetMountDir {
    # systemdirve\mnt
    $MountDir = "$env:SystemDrive\mnt"
    if (-not (Test-Path $MountDir)) {
        New-Item -ItemType Directory -Path $MountDir -Force | Out-Null
    }
    return $MountDir
}  

# Function to get WinRE version
function GetWinREVersion {

    $mountedPath = GetMountDir
    $filePath = "$mountedPath\Windows\System32\winpeshl.exe"

    $WinREVersion = (Get-Item $filePath).VersionInfo.FileVersionRaw.Revision

    return [int]$WinREVersion

}


# Main Execution

$WinREPath = GetWinREPath


# Make dir C:\mnt if not exists

$TempDir = GetMountDir


# Get the read write permission for this directory

if (-not (Test-Path $TempDir)) {

    New-Item -ItemType Directory -Path $TempDir -Force | Out-Null

}


# Mount WinRE image

dism /Mount-Image /ImageFile:"$WinREPath\winre.wim" /Index:1 /MountDir:"$TempDir"


$WinREVersion = GetWinREVersion

Write-Host "WinRE Version: $WinREVersion" -ForegroundColor Cyan

dism /Unmount-Image /MountDir:"$TempDir" /Discard

Remove-Item -Path $TempDir -Force -Recurse

File information

The English (United States) version of this software update installs files that have the following attributes. This update might contain files for additional languages.

File name

File version

Date

Time

File size

hvloader.dll

10.0.28000.1574

5-Feb-26

21:47

251,296

hvax64.exe

10.0.28000.1574

5-Feb-26

21:47

2,205,128

hvix64.exe

10.0.28000.1574

5-Feb-26

21:47

2,352,544

driver.stl

Not versioned

5-Feb-26

21:47

33,360

previous.driver.stl

Not versioned

5-Feb-26

21:47

33,360

kdnet.dll

10.0.28000.1574

5-Feb-26

21:47

157,128

kdstub.dll

10.0.28000.1574

5-Feb-26

21:47

87,456

bfsvc.exe

10.0.28000.1574

5-Feb-26

21:47

126,976

bootsvc.dll

10.0.28000.1574

5-Feb-26

21:47

315,496

driversipolicy.p7b

Not versioned

5-Feb-26

21:47

238,709

dxgkrnl.sys

10.0.28000.1574

5-Feb-26

21:47

5,346,720

cdd.dll

10.0.28000.1574

5-Feb-26

21:47

335,872

dxgmms1.sys

10.0.28000.1574

5-Feb-26

21:47

538,016

dxgmms2.sys

10.0.28000.1574

5-Feb-26

21:47

1,291,720

dxgkrnl.sys.mui

10.0.28000.1574

5-Feb-26

21:47

116,224

dxgmms2.sys.mui

10.0.28000.1574

5-Feb-26

21:47

5,120

cdd.dll.mui

10.0.28000.1574

5-Feb-26

21:47

3,072

dxgmms2.sys.mui

10.0.28000.1574

5-Feb-26

21:47

5,632

cdd.dll.mui

10.0.28000.1574

5-Feb-26

21:47

2,560

dxgkrnl.sys.mui

10.0.28000.1574

5-Feb-26

21:47

116,736

dxgkrnl.sys.mui

10.0.28000.1574

5-Feb-26

21:47

117,248

dxgkrnl.sys.mui

10.0.28000.1574

5-Feb-26

21:47

115,712

dxgmms2.sys.mui

10.0.28000.1574

5-Feb-26

21:47

4,608

dxgkrnl.sys.mui

10.0.28000.1574

5-Feb-26

21:47

115,200

Narrator.exe

10.0.28000.1574

5-Feb-26

21:47

1,171,456

DetailedReading-Default.xml

Not versioned

5-Feb-26

21:47

3,944

Narrator.lnk

Not versioned

5-Feb-26

21:47

1,108

Narrator.exe.mui

10.0.28000.1574

5-Feb-26

21:47

24,064

Narrator.exe.mui

10.0.28000.1574

5-Feb-26

21:47

28,672

Narrator.exe.mui

10.0.28000.1574

5-Feb-26

21:47

28,160

Narrator.exe.mui

10.0.28000.1574

5-Feb-26

21:47

27,648

Narrator.exe.mui

10.0.28000.1574

5-Feb-26

21:47

26,624

Narrator.exe.mui

10.0.28000.1574

5-Feb-26

21:47

29,696

Narrator.exe.mui

10.0.28000.1574

5-Feb-26

21:47

30,208

Narrator.exe.mui

10.0.28000.1574

5-Feb-26

21:47

29,184

Narrator.exe.mui

10.0.28000.1574

5-Feb-26

21:47

22,528

Narrator.exe.mui

10.0.28000.1574

5-Feb-26

21:47

26,112

Narrator.exe.mui

10.0.28000.1574

5-Feb-26

21:47

16,896

Narrator.exe.mui

10.0.28000.1574

5-Feb-26

21:47

16,384

Narrator.exe.mui

10.0.28000.1574

5-Feb-26

21:47

27,136

Narrator.exe.mui

10.0.28000.1574

5-Feb-26

21:47

13,312

windows.storage.dll

10.0.28000.1574

5-Feb-26

21:47

8,972,112

ntoskrnl.exe

10.0.28000.1574

5-Feb-26

21:47

13,813,152

ntkrla57.exe

10.0.28000.1574

5-Feb-26

21:47

12,481,952

bfsvc.dll

10.0.28000.1574

5-Feb-26

21:47

337,312

securebootai.dll

10.0.28000.1574

5-Feb-26

21:47

505,248

fveupdateai.dll

10.0.28000.1574

5-Feb-26

21:47

120,224

bcd.dll

10.0.28000.1574

5-Feb-26

21:47

175,008

hwreqchk.dll

Not versioned

5-Feb-26

21:47

443,808

ServicingCommon.dll

10.0.28000.1574

5-Feb-26

21:47

927,032

utcapi.dll

10.0.28000.1574

5-Feb-26

21:47

66,976

wimgapi.dll

10.0.28000.1574

5-Feb-26

21:47

935,328

wdscommonlib.dll

10.0.28000.1574

5-Feb-26

21:47

337,312

dismapi.dll

10.0.28000.1574

5-Feb-26

21:47

1,209,760

dismcore.dll

10.0.28000.1574

5-Feb-26

21:47

533,920

dismcoreps.dll

10.0.28000.1574

5-Feb-26

21:47

243,104

dismprov.dll

10.0.28000.1574

5-Feb-26

21:47

300,488

deployprovider.dll

10.0.28000.1574

5-Feb-26

21:47

718,240

folderprovider.dll

10.0.28000.1574

5-Feb-26

21:47

95,648

imagingprovider.dll

10.0.28000.1574

5-Feb-26

21:47

251,296

logprovider.dll

10.0.28000.1574

5-Feb-26

21:47

189,856

osimageprovider.dll

10.0.28000.1574

5-Feb-26

21:47

566,688

UpdateCompression.dll

5.0.1.1

5-Feb-26

21:47

529,864

vhdprovider.dll

10.0.28000.1574

5-Feb-26

21:47

599,456

wimprovider.dll

10.0.28000.1574

5-Feb-26

21:47

701,896

unattend.dll

10.0.28000.1574

5-Feb-26

21:47

357,792

wpx.dll

10.0.28000.1574

5-Feb-26

21:47

1,426,848

locale.nls

Not versioned

5-Feb-26

21:47

862,800

nlsbres.dll

10.0.28000.1574

5-Feb-26

21:47

103,880

schannel.dll

10.0.28000.1574

5-Feb-26

21:47

770,048

win32u.dll

10.0.28000.1574

5-Feb-26

21:47

170,944

win32k.sys

10.0.28000.1574

5-Feb-26

21:47

816,544

win32kfull.sys

10.0.28000.1574

5-Feb-26

21:47

4,345,856

win32kbase.sys

10.0.28000.1574

5-Feb-26

21:47

3,395,584

win32kbase_rs.sys

10.0.28000.1574

5-Feb-26

21:47

176,128

winpeshl.exe

10.0.28000.1574

5-Feb-26

21:47

90,112

wpeutil.dll

10.0.28000.1574

5-Feb-26

21:47

204,800

wpeutil.exe

10.0.28000.1574

5-Feb-26

21:47

32,768

wpeinit.exe

10.0.28000.1574

5-Feb-26

21:47

61,440

startnet.cmd

Not versioned

5-Feb-26

21:47

9

winsqlite3.dll

3.51.1.0

5-Feb-26

21:47

1,144,584

windows.storage.dll

10.0.28000.1574

5-Feb-26

21:47

7,220,240

schannel.dll

10.0.28000.1574

5-Feb-26

21:47

553,472

win32u.dll

10.0.28000.1574

5-Feb-26

21:47

106,432

winsqlite3.dll

3.51.1.0

5-Feb-26

21:47

894,208

bfsvc.dll

10.0.28000.1574

5-Feb-26

21:47

256,456

securebootai.dll

10.0.28000.1574

5-Feb-26

21:47

398,280

fveupdateai.dll

10.0.28000.1574

5-Feb-26

21:47

79,264

File name

File version

Date

Time

File size

driver.stl

Not versioned

5-Feb-26

21:47

15,113

previous.driver.stl

Not versioned

5-Feb-26

21:47

15,113

kdnet.dll

10.0.28000.1574

5-Feb-26

21:47

117,664

kdstub.dll

10.0.28000.1574

5-Feb-26

21:47

50,592

bfsvc.exe

10.0.28000.1574

5-Feb-26

21:47

110,080

bootsvc.dll

10.0.28000.1574

5-Feb-26

21:47

494,448

driversipolicy.p7b

Not versioned

5-Feb-26

21:47

238,709

dxgkrnl.sys

10.0.28000.1574

5-Feb-26

21:47

5,070,752

cdd.dll

10.0.28000.1574

5-Feb-26

21:47

286,208

dxgmms1.sys

10.0.28000.1574

5-Feb-26

21:47

459,680

dxgmms2.sys

10.0.28000.1574

5-Feb-26

21:47

1,163,680

dxgkrnl.sys.mui

10.0.28000.1574

5-Feb-26

21:47

116,224

dxgmms2.sys.mui

10.0.28000.1574

5-Feb-26

21:47

5,120

cdd.dll.mui

10.0.28000.1574

5-Feb-26

21:47

3,072

dxgmms2.sys.mui

10.0.28000.1574

5-Feb-26

21:47

5,632

cdd.dll.mui

10.0.28000.1574

5-Feb-26

21:47

2,560

dxgkrnl.sys.mui

10.0.28000.1574

5-Feb-26

21:47

116,736

dxgkrnl.sys.mui

10.0.28000.1574

5-Feb-26

21:47

117,248

dxgkrnl.sys.mui

10.0.28000.1574

5-Feb-26

21:47

115,712

dxgmms2.sys.mui

10.0.28000.1574

5-Feb-26

21:47

4,608

dxgkrnl.sys.mui

10.0.28000.1574

5-Feb-26

21:47

115,200

Narrator.exe

10.0.28000.1574

5-Feb-26

21:47

1,277,440

DetailedReading-Default.xml

Not versioned

5-Feb-26

21:47

3,944

Narrator.lnk

Not versioned

5-Feb-26

21:47

1,108

Narrator.exe.mui

10.0.28000.1574

5-Feb-26

21:47

24,064

Narrator.exe.mui

10.0.28000.1574

5-Feb-26

21:47

28,672

Narrator.exe.mui

10.0.28000.1574

5-Feb-26

21:47

28,160

Narrator.exe.mui

10.0.28000.1574

5-Feb-26

21:47

27,648

Narrator.exe.mui

10.0.28000.1574

5-Feb-26

21:47

26,624

Narrator.exe.mui

10.0.28000.1574

5-Feb-26

21:47

29,696

Narrator.exe.mui

10.0.28000.1574

5-Feb-26

21:47

30,208

Narrator.exe.mui

10.0.28000.1574

5-Feb-26

21:47

29,184

Narrator.exe.mui

10.0.28000.1574

5-Feb-26

21:47

22,528

Narrator.exe.mui

10.0.28000.1574

5-Feb-26

21:47

26,112

Narrator.exe.mui

10.0.28000.1574

5-Feb-26

21:47

16,896

Narrator.exe.mui

10.0.28000.1574

5-Feb-26

21:47

16,384

Narrator.exe.mui

10.0.28000.1574

5-Feb-26

21:47

27,136

Narrator.exe.mui

10.0.28000.1574

5-Feb-26

21:47

13,312

windows.storage.dll

10.0.28000.1574

5-Feb-26

21:47

19,163,888

ntoskrnl.exe

10.0.28000.1574

5-Feb-26

21:47

12,151,200

bfsvc.dll

10.0.28000.1574

5-Feb-26

21:47

316,832

securebootai.dll

10.0.28000.1574

5-Feb-26

21:47

494,496

fveupdateai.dll

10.0.28000.1574

5-Feb-26

21:47

103,328

bcd.dll

10.0.28000.1574

5-Feb-26

21:47

150,912

hwreqchk.dll

Not versioned

5-Feb-26

21:47

806,816

ServicingCommon.dll

10.0.28000.1574

5-Feb-26

21:47

1,632,832

utcapi.dll

10.0.28000.1574

5-Feb-26

21:47

46,496

wimgapi.dll

10.0.28000.1574

5-Feb-26

21:47

1,613,728

wdscommonlib.dll

10.0.28000.1574

5-Feb-26

21:47

315,336

dismapi.dll

10.0.28000.1574

5-Feb-26

21:47

2,157,984

dismcore.dll

10.0.28000.1574

5-Feb-26

21:47

870,816

dismcoreps.dll

10.0.28000.1574

5-Feb-26

21:47

227,232

dismprov.dll

10.0.28000.1574

5-Feb-26

21:47

296,352

deployprovider.dll

10.0.28000.1574

5-Feb-26

21:47

1,233,312

folderprovider.dll

10.0.28000.1574

5-Feb-26

21:47

162,720

imagingprovider.dll

10.0.28000.1574

5-Feb-26

21:47

470,432

logprovider.dll

10.0.28000.1574

5-Feb-26

21:47

178,632

osimageprovider.dll

10.0.28000.1574

5-Feb-26

21:47

1,033,120

UpdateCompression.dll

5.0.1.1

5-Feb-26

21:47

909,216

vhdprovider.dll

10.0.28000.1574

5-Feb-26

21:47

1,115,080

wimprovider.dll

10.0.28000.1574

5-Feb-26

21:47

1,296,288

unattend.dll

10.0.28000.1574

5-Feb-26

21:47

333,216

wpx.dll

10.0.28000.1574

5-Feb-26

21:47

1,553,312

locale.nls

Not versioned

5-Feb-26

21:47

862,800

nlsbres.dll

10.0.28000.1574

5-Feb-26

21:47

94,664

schannel.dll

10.0.28000.1574

5-Feb-26

21:47

1,285,120

win32u.dll

10.0.28000.1574

5-Feb-26

21:47

381,304

win32k.sys

10.0.28000.1574

5-Feb-26

21:47

703,392

win32kfull.sys

10.0.28000.1574

5-Feb-26

21:47

4,025,856

win32kbase.sys

10.0.28000.1574

5-Feb-26

21:47

3,188,224

win32kbase_rs.sys

10.0.28000.1574

5-Feb-26

21:47

130,560

winpeshl.exe

10.0.28000.1574

5-Feb-26

21:47

69,632

wpeutil.dll

10.0.28000.1574

5-Feb-26

21:47

186,368

wpeutil.exe

10.0.28000.1574

5-Feb-26

21:47

15,872

wpeinit.exe

10.0.28000.1574

5-Feb-26

21:47

39,424

startnet.cmd

Not versioned

5-Feb-26

21:47

9

winsqlite3.dll

3.51.1.0

5-Feb-26

21:47

2,147,592

d2d1.dll

10.0.28000.1574

5-Feb-26

21:47

7,023,072

d3d9on12.dll

10.0.28000.1574

5-Feb-26

21:47

913,920

d3d10warp.dll

10.0.28000.1574

5-Feb-26

21:47

7,362,616

d3d11.dll

10.0.28000.1574

5-Feb-26

21:47

3,243,344

d3d11on12.dll

10.0.28000.1574

5-Feb-26

21:47

814,280

d3d12.dll

10.0.28000.1574

5-Feb-26

21:47

174,912

DWrite.dll

10.0.28000.1574

5-Feb-26

21:47

2,957,824

gdi32.dll

10.0.28000.1574

5-Feb-26

21:47

325,856

iertutil.dll

11.0.28000.1574

5-Feb-26

21:47

2,740,408

jscript9.dll

11.0.28000.1574

5-Feb-26

21:47

6,452,224

msftedit.dll

10.0.28000.1574

5-Feb-26

21:47

4,264,448

mshtml.dll

11.0.28000.1574

5-Feb-26

21:47

28,077,056

msIso.dll

11.0.28000.1574

5-Feb-26

21:47

381,440

opengl32.dll

10.0.28000.1574

5-Feb-26

21:47

1,304,064

urlmon.dll

11.0.28000.1574

5-Feb-26

21:47

2,319,360

windows.storage.dll

10.0.28000.1574

5-Feb-26

21:47

12,363,888

WindowsCodecs.dll

10.0.28000.1574

5-Feb-26

21:47

2,857,672

wininet.dll

11.0.28000.1574

5-Feb-26

21:47

3,076,088

windows.storage.dll

10.0.28000.1574

5-Feb-26

21:47

7,220,240

schannel.dll

10.0.28000.1574

5-Feb-26

21:47

553,472

win32u.dll

10.0.28000.1574

5-Feb-26

21:47

106,432

winsqlite3.dll

3.51.1.0

5-Feb-26

21:47

894,208

bfsvc.dll

10.0.28000.1574

5-Feb-26

21:47

256,456

securebootai.dll

10.0.28000.1574

5-Feb-26

21:47

398,280

fveupdateai.dll

10.0.28000.1574

5-Feb-26

21:47

79,264

References

Description of the standard terminology that is used to describe Microsoft software updates

Query words: safeos du

Need more help?

Want more options?

Explore subscription benefits, browse training courses, learn how to secure your device, and more.