KB5060119: Safe OS Dynamic Update for Windows Server, version 23H2: May 13, 2025

Applies To
Windows Server, version 23H2

Summary

This update makes improvements to the Windows recovery environment (WinRE) in Windows Server, version 23H2.

How to get this update

Install this update

To install this update, use one of the following release channels.


Available Next step
Available This update is available through Windows Update. It will be downloaded and installed automatically.
Prerequisites There are no prerequisites to apply this update.
Restart information You do not have to restart your device after you apply this update.
Removal information This update cannot be removed once it is applied to a Windows image.
Update replacement information This update replaces the previously released update KB5055767.
Verify the installation of this update After installing this update, the WinRE version installed on the device should be 10.0.25398.1606.
Methods to verify the WinRE version installed

Run the following PowerShell script "GetWinReVersion.ps1" with Administrator credentials. After you run the script, you should receive the installed WinRE version as in the following example:

GetWinREVersion Screenshot

GetWinReVersion.ps1 PowerShell script


################################################################################################

#

# Copyright (c) Microsoft Corporation.

# Licensed under the MIT License.

#

# THE SOFTWARE IS PROVIDED *AS IS*, WITHOUT WARRANTY OF ANY KIND, EXPRESS OR

# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,

# FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE

# AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER

# LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,

# OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE

# SOFTWARE.

#

################################################################################################


# Function to get WinRE path

function GetWinREPath {

    $WinRELocation = (reagentc /info | Select-String "Windows RE location")

    if ($WinRELocation) {

        return $WinRELocation.ToString().Split(':')[-1].Trim()

    } else {

        Write-Host "Failed to find WinRE path" -ForegroundColor Red

        exit 1

    }

}

 
# Creates and needs to be return the mount directory
function GetMountDir {
    # systemdirve\mnt
    $MountDir = "$env:SystemDrive\mnt"
    if (-not (Test-Path $MountDir)) {
        New-Item -ItemType Directory -Path $MountDir -Force | Out-Null
    }
    return $MountDir
}  

# Function to get WinRE version
function GetWinREVersion {

    $mountedPath = GetMountDir
    $filePath = "$mountedPath\Windows\System32\winpeshl.exe"

    $WinREVersion = (Get-Item $filePath).VersionInfo.FileVersionRaw.Revision

    return [int]$WinREVersion

}

# Main Execution

$WinREPath = GetWinREPath

# Make dir C:\mnt if not exists

$TempDir = GetMountDir

# Get the read write permission for this directory

if (-not (Test-Path $TempDir)) {

    New-Item -ItemType Directory -Path $TempDir -Force | Out-Null

}

# Mount WinRE image

dism /Mount-Image /ImageFile:"$WinREPath\winre.wim" /Index:1 /MountDir:"$TempDir"

$WinREVersion = GetWinREVersion

Write-Host "WinRE Version: $WinREVersion" -ForegroundColor Cyan

dism /Unmount-Image /MountDir:"$TempDir" /Discard

Remove-Item -Path $TempDir -Force -Recurse

File information

The English (United States) version of this software update installs files that have the following attributes. This update might contain files for additional languages.

For all supported X64-based versions
File name File version Date Time File size
skci.dll 10.0.25398.1606 29-Apr-25 4:32 336,176
bootmgfw.efi 10.0.25398.1606 29-Apr-25 4:32 2,649,504
bootmgfw_EX.efi 10.0.26100.30169 29-Apr-25 4:32 2,774,808
SecureBootRecovery.efi Not versioned 29-Apr-25 4:32 162,192
bootmgr.efi 10.0.25398.1606 29-Apr-25 4:32 2,632,624
bootmgr_EX.efi 10.0.26100.30169 29-Apr-25 4:32 2,758,048
boot.stl Not versioned 29-Apr-25 4:32 11,030
winsipolicy.p7b Not versioned 29-Apr-25 4:32 10,341
winload.exe 10.0.25398.1606 29-Apr-25 4:32 1,712,368
winload.efi 10.0.25398.1606 29-Apr-25 4:32 3,071,256
BootMenuUX.dll 10.0.25398.1606 29-Apr-25 4:32 229,376
driversipolicy.p7b Not versioned 29-Apr-25 4:32 229,162
ci.dll 10.0.25398.1606 29-Apr-25 4:32 1,059,256
driver.stl Not versioned 29-Apr-25 4:32 32,631
cmi2migxml.dll 10.0.25398.1606 29-Apr-25 4:32 222,640
csiagent.dll 10.0.25398.1606 29-Apr-25 4:32 714,168
diagER.dll 10.0.25398.1606 29-Apr-25 4:32 95,672
hwcompat.dll 10.0.25398.1606 29-Apr-25 4:32 239,024
hwcompat.txt Not versioned 29-Apr-25 4:32 969,028
hwexclude.txt Not versioned 29-Apr-25 4:32 51
icbexclusion.inf Not versioned 29-Apr-25 4:32 7,222
migapp.xml Not versioned 29-Apr-25 4:32 654,548
migcore.dll 10.0.25398.1606 29-Apr-25 4:32 9,270,688
mighost.exe 10.0.25398.1606 29-Apr-25 4:32 284,088
migres.dll 10.0.25398.1606 29-Apr-25 4:32 26,032
migisol.dll 10.0.25398.1606 29-Apr-25 4:32 144,824
migstore.dll 10.0.25398.1606 29-Apr-25 4:32 1,295,816
migsys.dll 10.0.25398.1606 29-Apr-25 4:32 460,216
MXEAgent.dll 10.0.25398.1606 29-Apr-25 4:32 386,464
AppExtAgent.dll 10.0.25398.1606 29-Apr-25 4:32 484,784
offline.xml Not versioned 29-Apr-25 4:32 41,994
oscomps.xml Not versioned 29-Apr-25 4:32 449,323
oscomps.woa.xml Not versioned 29-Apr-25 4:32 249,101
osfilter.inf Not versioned 29-Apr-25 4:32 21,299
pnppropmig.dll 10.0.25398.1606 29-Apr-25 4:32 103,864
ReserveManager.dll 10.0.25398.1606 29-Apr-25 4:32 308,656
setupplatform.cfg Not versioned 29-Apr-25 4:32 12,571
setupplatform.dll 1.80.25398.1606 29-Apr-25 4:32 9,209,264
setupplatform.exe 1.80.25398.1606 29-Apr-25 4:32 243,128
SFCN.dat Not versioned 29-Apr-25 4:32 1,824
SFLCID.dat Not versioned 29-Apr-25 4:32 1,644
SFLISTW7.dat Not versioned 29-Apr-25 4:32 1,703,368
SFLISTW8.dat Not versioned 29-Apr-25 4:32 2,608,858
SFLISTWB.dat Not versioned 29-Apr-25 4:32 3,172,904
SFLISTWT.dat Not versioned 29-Apr-25 4:32 4,935,402
sflistw8.woa.dat Not versioned 29-Apr-25 4:32 954,436
SFLISTRS1.dat Not versioned 29-Apr-25 4:32 5,593,182
sflistwb.woa.dat Not versioned 29-Apr-25 4:32 1,150,134
sflistwt.woa.dat Not versioned 29-Apr-25 4:32 2,636,814
SFPAT.inf Not versioned 29-Apr-25 4:32 11,602
SFPATW7.inf Not versioned 29-Apr-25 4:32 17,396
SFPATW8.inf Not versioned 29-Apr-25 4:32 79,818
SFPATWB.inf Not versioned 29-Apr-25 4:32 91,635
SFPATWT.inf Not versioned 29-Apr-25 4:32 165,729
SFPATRS1.inf Not versioned 29-Apr-25 4:32 169,730
unbcl.dll 10.0.25398.1606 29-Apr-25 4:32 1,082,808
upgradeagent.dll 10.0.25398.1606 29-Apr-25 4:32 3,306,952
upgradeagent.xml Not versioned 29-Apr-25 4:32 70,907
upgrade_comp.xml Not versioned 29-Apr-25 4:32 6,054
upgrade_bulk.xml Not versioned 29-Apr-25 4:32 211,085
upgrade_data.xml Not versioned 29-Apr-25 4:32 41,750
upgrade_frmwrk.xml Not versioned 29-Apr-25 4:32 18,785
upgWow_bulk.xml Not versioned 29-Apr-25 4:32 114,707
uninstall.xml Not versioned 29-Apr-25 4:32 4,639
uninstall_data.xml Not versioned 29-Apr-25 4:32 11,122
wdsutil.dll 10.0.25398.1606 29-Apr-25 4:32 349,640
WinSetupMon.hiv Not versioned 29-Apr-25 4:32 8,192
WinSetupMon.sys 10.0.25398.1606 29-Apr-25 4:32 132,544
netio.sys 10.0.25398.1606 29-Apr-25 4:32 656,816
ntdll.dll 10.0.25398.1606 29-Apr-25 4:32 2,265,864
ntoskrnl.exe 10.0.25398.1606 29-Apr-25 4:32 12,686,792
ntkrla57.exe 10.0.25398.1606 29-Apr-25 4:32 11,445,680
diagtrack.dll 10.0.10586.0 29-Apr-25 4:32 1,365,856
diagtrackrunner.exe 10.0.10586.0 29-Apr-25 4:32 88,256
reagent.admx Not versioned 29-Apr-25 4:32 1,240
reagent.dll 10.0.25398.1606 29-Apr-25 4:32 607,672
reagent.xml Not versioned 29-Apr-25 4:32 837
SetupPlatform.cfg Not versioned 29-Apr-25 4:32 19,051
wdscore.dll 10.0.25398.1606 29-Apr-25 4:32 275,912
wdsclientapi.dll 10.0.25398.1606 29-Apr-25 4:32 267,840
wdscsl.dll 10.0.25398.1606 29-Apr-25 4:32 79,304
wdsimage.dll 10.0.25398.1606 29-Apr-25 4:32 124,496
wdstptc.dll 10.0.25398.1606 29-Apr-25 4:32 185,936
fvevol.sys 10.0.25398.1606 29-Apr-25 4:32 898,504
dumpfve.sys 10.0.25398.1606 29-Apr-25 4:32 146,096
fveapibase.dll 10.0.25398.1606 29-Apr-25 4:32 507,904
fveapi.dll 10.0.25398.1606 29-Apr-25 4:32 1,097,728
tcpip.sys 10.0.25398.1606 29-Apr-25 4:32 3,274,160
FWPKCLNT.SYS 10.0.25398.1606 29-Apr-25 4:32 570,808
tcpipreg.sys 10.0.25398.1606 29-Apr-25 4:32 81,920
tcpip.sys.mui 10.0.25398.1606 29-Apr-25 4:32 227,840
tcpip.sys.mui 10.0.25398.1606 29-Apr-25 4:32 228,864
tcpip.sys.mui 10.0.25398.1606 29-Apr-25 4:32 224,768
tcpip.sys.mui 10.0.25398.1606 29-Apr-25 4:32 229,376
tcpip.sys.mui 10.0.25398.1606 29-Apr-25 4:32 228,352
tcpip.sys.mui 10.0.25398.1606 29-Apr-25 4:32 229,888
tcpip.sys.mui 10.0.25398.1606 29-Apr-25 4:32 227,328
tcpip.sys.mui 10.0.25398.1606 29-Apr-25 4:32 218,624
tcpip.sys.mui 10.0.25398.1606 29-Apr-25 4:32 225,792
tcpip.sys.mui 10.0.25398.1606 29-Apr-25 4:32 216,576
winpeshl.exe 10.0.25398.1606 29-Apr-25 4:32 53,248
wpeutil.dll 10.0.25398.1606 29-Apr-25 4:32 155,648
wpeutil.exe 10.0.25398.1606 29-Apr-25 4:32 36,864
wpeinit.exe 10.0.25398.1606 29-Apr-25 4:32 57,344
startnet.cmd Not versioned 29-Apr-25 4:32 9
StartRep.exe 10.0.25398.1606 29-Apr-25 4:32 671,744
RecEnv.exe 10.0.25398.1606 29-Apr-25 4:32 411,040
BootRec.exe 10.0.25398.1606 29-Apr-25 4:32 184,320
ntdll.dll 10.0.25398.1606 29-Apr-25 4:32 1,747,504
fveapibase.dll 10.0.25398.1606 29-Apr-25 4:32 426,496
fveapi.dll 10.0.25398.1606 29-Apr-25 4:32 883,712
wdsnbp.com Not versioned 29-Apr-25 4:32 30,832
abortpxe.com Not versioned 29-Apr-25 4:32 79
bootmgr.exe 10.0.25398.1606 29-Apr-25 4:32 742,832
pxeboot.com Not versioned 29-Apr-25 4:32 25,254
pxeboot.n12 Not versioned 29-Apr-25 4:32 25,238
hdlscom1.com Not versioned 29-Apr-25 4:32 25,662
hdlscom2.com Not versioned 29-Apr-25 4:32 25,662
hdlscom1.n12 Not versioned 29-Apr-25 4:32 25,646
hdlscom2.n12 Not versioned 29-Apr-25 4:32 25,646
bootmgfw.efi 10.0.25398.1606 29-Apr-25 4:32 2,234,800
bootmgfw_EX.efi 10.0.26100.30169 29-Apr-25 4:32 2,355,984

References

Description of the standard terminology that is used to describe Microsoft software updates

Query words: safeos du