Windows Secure Boot certificate expiration
Important: Secure Boot certificates used by most Windows devices have started expiring in June 2026. This might affect the ability of certain personal and business devices to boot securely if not updated in time. To avoid disruption, we recommend reviewing the guidance and taking action to update certificates in advance. For details and preparation steps, see Windows Secure Boot certificate expiration and CA updates.
Summary
This update makes improvements to Windows setup binaries or any files that setup uses for feature updates in Windows Server, version 23H2.
How to get this update
Install this update
To install this update, use one of the following release channels.
| Available | Next step |
|---|---|
|
This update is available through Windows Update. It will be downloaded and installed automatically. |
| Prerequisites | There are no prerequisites to apply this update. |
|---|---|
| Restart information | You do not have to restart your computer after you apply this update. |
| Update replacement information | This update replaces the previously released update KB5047133. |
File information
The English (United States) version of this software update installs files that have the following attributes. This update might contain files for additional languages.
For all supported x64-based versions
| File name | File version | Date | Time | File size |
|---|---|---|---|---|
| appraiser.sdb | Not versioned | 5-Jul-25 | 3:55 | 2,777,691 |
| cmi2migxml.dll | 10.0.25398.1733 | 5-Jul-25 | 3:55 | 222,640 |
| csiagent.dll | 10.0.25398.1733 | 5-Jul-25 | 3:55 | 714,184 |
| migcore.dll | 10.0.25398.1733 | 5-Jul-25 | 3:55 | 9,270,688 |
| mighost.exe | 10.0.25398.1733 | 5-Jul-25 | 3:55 | 284,088 |
| migisol.dll | 10.0.25398.1733 | 5-Jul-25 | 3:55 | 144,824 |
| migres.dll | 10.0.25398.1733 | 5-Jul-25 | 3:55 | 26,040 |
| MigStore.dll | 10.0.25398.1733 | 5-Jul-25 | 3:55 | 1,295,800 |
| MigSys.dll | 10.0.25398.1733 | 5-Jul-25 | 3:55 | 460,216 |
| MXEAgent.dll | 10.0.25398.1733 | 5-Jul-25 | 3:55 | 386,488 |
| ReAgent.dll | 10.0.25398.1733 | 5-Jul-25 | 3:55 | 619,960 |
| IOSchedFilter-Replacement.man | Not versioned | 5-Jul-25 | 3:55 | 917 |
| Microsoft-Windows-NetworkController-Framework-Replacement.man | Not versioned | 5-Jul-25 | 3:55 | 959 |
| VsmKeyMigPlugin.dll | 10.0.25398.1733 | 5-Jul-25 | 3:55 | 107,960 |
| tcblaunch-replacement.man | Not versioned | 5-Jul-25 | 3:55 | 1,935 |
| SetupPlatform.cfg | Not versioned | 5-Jul-25 | 3:55 | 19,051 |
| SetupPlatform.dll | 1.80.25398.1733 | 5-Jul-25 | 3:55 | 9,213,368 |
| SetupPlatform.exe | 1.80.25398.1733 | 5-Jul-25 | 3:55 | 243,144 |
| SetupPrep.exe | 10.0.25398.1733 | 5-Jul-25 | 3:55 | 1,328,544 |
| SFPATRS1.INF | Not versioned | 5-Jul-25 | 3:55 | 169,730 |
| upgradeagent.dll | 10.0.25398.1733 | 5-Jul-25 | 3:55 | 3,306,912 |
| WinSetupBoot.sys | 10.0.25398.1733 | 5-Jul-25 | 3:55 | 112,032 |
| WinSetupMon.sys | 10.0.25398.1733 | 5-Jul-25 | 3:55 | 132,576 |
References
Description of the standard terminology that is used to describe Microsoft software updates
Query words: Setup DU