Windows Secure Boot certificate expiration
Important: Secure Boot certificates used by most Windows devices are set to expire starting in June 2026. This might affect the ability of certain personal and business devices to boot securely if not updated in time. To avoid disruption, we recommend reviewing the guidance and taking action to update certificates in advance. For details and preparation steps, see Windows Secure Boot certificate expiration and CA updates.
Summary
This update makes improvements to Windows setup binaries or any files that setup uses for feature updates.
How to get this update
Install this update
To install this update, use one of the following release channels.
|
Available |
Next step |
|
|
This update is available through Windows Update. It will be downloaded and installed automatically. |
|
Available |
Next step |
|
|
To get the standalone package for this update, go to the Microsoft Update Catalog website. To download updates from the Update Catalog, see Steps to download updates from the Windows Update Catalog. |
|
Available |
Next step |
|
|
This update will automatically sync with Windows Server Update Services (WSUS) if you configure Products and Classifications as follows:
|
|
Prerequisites |
There are no prerequisites to apply this update. |
|
Restart information |
You do not have to restart your computer after you apply this update. |
|
Update replacement information |
This update replaces the previously released update KB5068795. |
File information
The English (United States) version of this software update installs files that have the following attributes. This update might contain files for additional languages.
|
File name |
File version |
Date |
Time |
File size |
|
appraiser.sdb |
Not versioned |
13-Jan-26 |
19:26 |
2,777,691 |
|
bootsvc.dll |
10.0.25398.2140 |
13-Jan-26 |
19:26 |
298,968 |
|
cmi2migxml.dll |
10.0.25398.2140 |
13-Jan-26 |
19:26 |
222,624 |
|
csiagent.dll |
10.0.25398.2140 |
13-Jan-26 |
19:26 |
714,144 |
|
migcore.dll |
10.0.25398.2140 |
13-Jan-26 |
19:26 |
9,270,728 |
|
mighost.exe |
10.0.25398.2140 |
13-Jan-26 |
19:26 |
284,064 |
|
migisol.dll |
10.0.25398.2140 |
13-Jan-26 |
19:26 |
144,840 |
|
migres.dll |
10.0.25398.2140 |
13-Jan-26 |
19:26 |
26,016 |
|
MigStore.dll |
10.0.25398.2140 |
13-Jan-26 |
19:26 |
1,295,816 |
|
MigSys.dll |
10.0.25398.2140 |
13-Jan-26 |
19:26 |
460,232 |
|
MXEAgent.dll |
10.0.25398.2140 |
13-Jan-26 |
19:26 |
386,464 |
|
ReAgent.dll |
10.0.25398.2140 |
13-Jan-26 |
19:26 |
603,552 |
|
IOSchedFilter-Replacement.man |
Not versioned |
13-Jan-26 |
19:26 |
917 |
|
Microsoft-Windows-NetworkController-Framework-Replacement.man |
Not versioned |
13-Jan-26 |
19:26 |
959 |
|
VsmKeyMigPlugin.dll |
10.0.25398.2140 |
13-Jan-26 |
19:26 |
107,936 |
|
tcblaunch-replacement.man |
Not versioned |
13-Jan-26 |
19:26 |
1,935 |
|
Setup.exe |
10.0.25398.2140 |
13-Jan-26 |
19:26 |
333,216 |
|
SetupPlatform.cfg |
Not versioned |
13-Jan-26 |
19:26 |
19,051 |
|
SetupPlatform.dll |
1.80.25398.2140 |
13-Jan-26 |
19:26 |
9,213,344 |
|
SetupPlatform.exe |
1.80.25398.2140 |
13-Jan-26 |
19:26 |
243,144 |
|
SetupPrep.exe |
10.0.25398.2140 |
13-Jan-26 |
19:26 |
1,328,544 |
|
SFPATRS1.INF |
Not versioned |
13-Jan-26 |
19:26 |
169,730 |
|
upgradeagent.dll |
10.0.25398.2140 |
13-Jan-26 |
19:26 |
3,306,912 |
|
winsetup.dll |
10.0.25398.2140 |
13-Jan-26 |
19:26 |
3,044,768 |
|
WinSetupBoot.sys |
10.0.25398.2140 |
13-Jan-26 |
19:26 |
112,032 |
|
WinSetupMon.sys |
10.0.25398.2140 |
13-Jan-26 |
19:26 |
132,536 |
References
Description of the standard terminology that is used to describe Microsoft software updates
Query words: Setup DU
