Windows Secure Boot certificate expiration
Important: Secure Boot certificates used by most Windows devices have started expiring in June 2026. This might affect the ability of certain personal and business devices to boot securely if not updated in time. To avoid disruption, we recommend reviewing the guidance and taking action to update certificates in advance. For details and preparation steps, see Windows Secure Boot certificate expiration and CA updates.
Summary
This update makes improvements to Windows setup binaries or any files that setup uses for feature updates in Windows Server 2025.
How to get this update
Install this update
To install this update, use one of the following release channels.
| Available | Next step |
|---|---|
|
This update is available through Windows Update. It will be downloaded and installed automatically. |
| Prerequisites | There are no prerequisites to apply this update. |
|---|---|
| Restart information | You do not have to restart your computer after you apply this update. |
| Update replacement information | This update does not replace any previously released update. |
| File information | A list of the files that are included in this update are provided in a CSV (Comma delimited) (*.csv) file. The file can be opened in a text editor such as Notepad or in Microsoft Excel. Note: The English (United States) version of this software update might contain files for additional languages. 
Download the file information for update KB5095966. |
References
Description of the standard terminology that is used to describe Microsoft software updates
Query words: Setup DU