This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. Key changes include the following:
- Improves the Secure Boot revocation list (DBX) update experience to avoid multiple restarts when you deploy the DBX update on a device where the Credential Guard service is not running.
- Addresses an issue in which the Secure Boot revocation list (DBX) is not applied when the Secure Boot allow list (DB) update is empty.
We strongly recommend you install the latest servicing stack update (SSU) for your operating system before installing the latest cumulative update (LCU). Installing servicing stack updates (SSU) makes sure that you have a robust and reliable servicing stack so that your devices can receive and install Microsoft security fixes.
How to get this update
Method 1: Windows Update
This update is available through Windows Update. It will be downloaded and installed automatically.
Method 2: Microsoft Update Catalog
To get the stand-alone package for this update, go to the Microsoft Update Catalog website.
Method 3: Windows Server Update Services
This update is also available through Windows Server Update Services (WSUS).
There are no prerequisites to apply this update.
You don't have to restart your computer after you apply this update.
Update replacement information
This update replaces the previously released update KB 4512938.
The English (United States) version of this software update installs files that have the attributes that are listed in the following tables.
Windows 8.1, Windows RT 8.1 and Windows Server 2012 R2 file information
The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.