Applies To
Windows 11 version 24H2, all editions Windows 11 version 25H2, all editions Windows Server 2025

Windows Secure Boot certificate expiration 

Important: Secure Boot certificates used by most Windows devices are set to expire starting in June 2026. This might affect the ability of certain personal and business devices to boot securely if not updated in time. To avoid disruption, we recommend reviewing the guidance and taking action to update certificates in advance. For details and preparation steps, see Windows Secure Boot certificate expiration and CA updates.

Summary

This update makes improvements to Windows setup binaries or any files that setup uses for feature updates in Windows 11, version 24H2, Windows 11, version 25H2, and Windows Server 2025. The following is a summary of the issues that this update addresses when you install this update. The bold text within the brackets indicates the item or area of the change we are documenting.

  • [Secure Boot] This release will execute updates in the Boot Manager on devices that already have the Windows UEFI CA 2023 certificate in their Secure Boot Signature Database (DB). It replaces the 2011 signed bootmgfw.efi with the 2023 signed bootmgfw.efi. Be advised of the consequences of resetting the DB or toggling Secure Boot, as this can cause a "Secure Boot violation" issue. In those rare cases, the solution is to create the Secure Boot recovery media.

How to get this update

Install this update

To install this update, use one of the following release channels.

Available

Next step

Available

This update is available through Windows Update. It will be downloaded and installed automatically.

Prerequisites

There are no prerequisites to apply this update.

Restart information

You do not have to restart your computer after you apply this update.

Update replacement information

This update replaces the previously released update KB5068516.

File information

The English (United States) version of this software update installs files that have the following attributes. This update might contain files for additional languages.

File name

File version

Date

Time

File size

AcRes.dll

10.0.26100.7697

17-Jan-26

1:06

353,696

Appraiser.dll

10.0.26100.7697

17-Jan-26

1:06

3,335,584

appraiser.sdb

Not versioned

17-Jan-26

1:06

2,808,159

AppraiserRes.dll

10.0.26100.7697

17-Jan-26

1:06

161,176

AcRes.dll.mui

10.0.26100.7697

17-Jan-26

1:06

333,824

MediaSetupUIMgr.dll.mui

10.0.26100.7697

17-Jan-26

1:06

78,848

SetupPlatform.exe.mui

1.97.26100.7697

17-Jan-26

1:06

14,232

MediaSetupUIMgr.dll.mui

10.0.26100.7697

17-Jan-26

1:06

92,160

SetupPlatform.exe.mui

1.97.26100.7697

17-Jan-26

1:06

14,208

bootsvc.dll

10.0.26100.7697

17-Jan-26

1:06

307,232

MediaSetupUIMgr.dll.mui

10.0.26100.7697

17-Jan-26

1:06

80,896

compatctrl.dll

10.0.26100.7697

17-Jan-26

1:06

234,880

AcRes.dll.mui

10.0.26100.7697

17-Jan-26

1:06

358,400

MediaSetupUIMgr.dll.mui

10.0.26100.7697

17-Jan-26

1:06

87,040

SetupPlatform.exe.mui

1.97.26100.7697

17-Jan-26

1:06

14,224

AcRes.dll.mui

10.0.26100.7697

17-Jan-26

1:06

349,696

MediaSetupUIMgr.dll.mui

10.0.26100.7697

17-Jan-26

1:06

86,016

SetupPlatform.exe.mui

1.97.26100.7697

17-Jan-26

1:06

14,248

AcRes.dll.mui

10.0.26100.7697

17-Jan-26

1:06

390,656

MediaSetupUIMgr.dll.mui

10.0.26100.7697

17-Jan-26

1:06

96,256

SetupPlatform.exe.mui

1.97.26100.7697

17-Jan-26

1:06

14,744

DismApi.dll

10.0.26100.7697

17-Jan-26

1:06

1,279,360

AcRes.dll.mui

10.0.26100.7697

17-Jan-26

1:06

408,064

MediaSetupUIMgr.dll.mui

10.0.26100.7697

17-Jan-26

1:06

101,376

SetupPlatform.exe.mui

1.97.26100.7697

17-Jan-26

1:06

14,736

AcRes.dll.mui

10.0.26100.7697

17-Jan-26

1:06

384,000

MediaSetupUIMgr.dll.mui

10.0.26100.7697

17-Jan-26

1:06

92,672

MediaSetupUIMgr.dll.mui

10.0.26100.7697

17-Jan-26

1:06

83,968

Facilitator.dll

10.0.26100.7697

17-Jan-26

1:06

1,123,728

AcRes.dll.mui

10.0.26100.7697

17-Jan-26

1:06

353,280

MediaSetupUIMgr.dll.mui

10.0.26100.7697

17-Jan-26

1:06

85,504

MediaSetupUIMgr.dll.mui

10.0.26100.7697

17-Jan-26

1:06

100,352

AcRes.dll.mui

10.0.26100.7697

17-Jan-26

1:06

389,120

MediaSetupUIMgr.dll.mui

10.0.26100.7697

17-Jan-26

1:06

97,792

MediaSetupUIMgr.dll.mui

10.0.26100.7697

17-Jan-26

1:06

72,704

SetupPlatform.exe.mui

1.97.26100.7697

17-Jan-26

1:06

13,720

MediaSetupUIMgr.dll.mui

10.0.26100.7697

17-Jan-26

1:06

89,600

SetupPlatform.exe.mui

1.97.26100.7697

17-Jan-26

1:06

14,240

AcRes.dll.mui

10.0.26100.7697

17-Jan-26

1:06

380,416

SetupPlatform.exe.mui

1.97.26100.7697

17-Jan-26

1:06

14,760

HwReqChk.dll

Not versioned

17-Jan-26

1:06

451,992

AcRes.dll.mui

10.0.26100.7697

17-Jan-26

1:06

388,608

MediaSetupUIMgr.dll.mui

10.0.26100.7697

17-Jan-26

1:06

93,696

AcRes.dll.mui

10.0.26100.7697

17-Jan-26

1:06

243,712

MediaSetupUIMgr.dll.mui

10.0.26100.7697

17-Jan-26

1:06

58,880

SetupPlatform.exe.mui

1.97.26100.7697

17-Jan-26

1:06

13,200

AcRes.dll.mui

10.0.26100.7697

17-Jan-26

1:06

230,912

MediaSetupUIMgr.dll.mui

10.0.26100.7697

17-Jan-26

1:06

56,320

SetupPlatform.exe.mui

1.97.26100.7697

17-Jan-26

1:06

13,184

MediaSetupUIMgr.dll

10.0.26100.7697

17-Jan-26

1:06

1,742,208

AcRes.dll.mui

10.0.26100.7697

17-Jan-26

1:06

350,720

AcRes.dll.mui

10.0.26100.7697

17-Jan-26

1:06

392,192

MediaSetupUIMgr.dll.mui

10.0.26100.7697

17-Jan-26

1:06

90,112

AcRes.dll.mui

10.0.26100.7697

17-Jan-26

1:06

395,264

AcRes.dll.mui

10.0.26100.7697

17-Jan-26

1:06

367,616

AcRes.dll.mui

10.0.26100.7697

17-Jan-26

1:06

370,176

MediaSetupUIMgr.dll.mui

10.0.26100.7697

17-Jan-26

1:06

90,624

ReAgent.dll

10.0.26100.7697

17-Jan-26

1:06

775,576

AppXDeploymentServer-Replacement.man

Not versioned

17-Jan-26

1:06

10,650

Content-Indexing-Common-Replacement.man

Not versioned

17-Jan-26

1:06

4,021

FailoverCluster-ClusSvc-Replacement.man

Not versioned

17-Jan-26

1:06

2,481

AppxUpgradeMigrationPlugin.dll

10.0.26100.7697

17-Jan-26

1:06

603,544

ClusterUpgradePlugin.dll

10.0.26100.7697

17-Jan-26

1:06

107,928

VsmKeyMigPlugin.dll

10.0.26100.7697

17-Jan-26

1:06

112,040

tcblaunch-replacement.man

Not versioned

17-Jan-26

1:06

1,935

tpmdriverwmi-replacement.man

Not versioned

17-Jan-26

1:06

2,695

Windows-Internal-Shell-AIX-Config-Replacement.man

Not versioned

17-Jan-26

1:06

1,552

WindowsSearchEngine-replacement.man

Not versioned

17-Jan-26

1:06

6,327

reportgen.dll

10.0.26100.7697

17-Jan-26

1:06

75,136

ReserveManager.dll

10.0.26100.7697

17-Jan-26

1:06

345,496

AcRes.dll.mui

10.0.26100.7697

17-Jan-26

1:06

367,104

MediaSetupUIMgr.dll.mui

10.0.26100.7697

17-Jan-26

1:06

88,576

ServicingCommon.dll

10.0.26100.7697

17-Jan-26

1:06

1,030,304

setupcompat.dll

10.0.26100.7697

17-Jan-26

1:06

370,048

SetupCore.dll

10.0.26100.7697

17-Jan-26

1:06

2,954,640

SetupHost.exe

10.0.26100.7697

17-Jan-26

1:06

914,856

SetupMgr.dll

10.0.26100.7697

17-Jan-26

1:06

1,238,432

SetupPlatform.dll

1.97.26100.7697

17-Jan-26

1:06

9,827,744

SetupPlatform.exe

1.97.26100.7697

17-Jan-26

1:06

255,360

SetupPrep.exe

10.0.26100.7697

17-Jan-26

1:06

1,357,200

AcRes.dll.mui

10.0.26100.7697

17-Jan-26

1:06

359,424

MediaSetupUIMgr.dll.mui

10.0.26100.7697

17-Jan-26

1:06

81,408

AcRes.dll.mui

10.0.26100.7697

17-Jan-26

1:06

347,648

upgrade_bulk.xml

Not versioned

17-Jan-26

1:06

211,949

WinSetupBoot.sys

10.0.26100.7697

17-Jan-26

1:06

112,000

WinSetupMon.sys

10.0.26100.7697

17-Jan-26

1:06

169,360

AcRes.dll.mui

10.0.26100.7697

17-Jan-26

1:06

187,392

MediaSetupUIMgr.dll.mui

10.0.26100.7697

17-Jan-26

1:06

45,568

SetupPlatform.exe.mui

1.97.26100.7697

17-Jan-26

1:06

13,208

MediaSetupUIMgr.dll.mui

10.0.26100.7697

17-Jan-26

1:06

46,080

File name

File version

Date

Time

File size

AcRes.dll

10.0.26100.7697

17-Jan-26

1:06

343,960

Appraiser.dll

10.0.26100.7697

17-Jan-26

1:06

3,313,536

appraiser.sdb

Not versioned

17-Jan-26

1:06

2,028,165

AppraiserRes.dll

10.0.26100.7697

17-Jan-26

1:06

150,912

AcRes.dll.mui

10.0.26100.7697

17-Jan-26

1:06

333,824

MediaSetupUIMgr.dll.mui

10.0.26100.7697

17-Jan-26

1:06

78,848

SetupPlatform.exe.mui

1.97.26100.7697

17-Jan-26

1:06

14,248

MediaSetupUIMgr.dll.mui

10.0.26100.7697

17-Jan-26

1:06

92,160

bootsvc.dll

10.0.26100.7697

17-Jan-26

1:06

287,224

MediaSetupUIMgr.dll.mui

10.0.26100.7697

17-Jan-26

1:06

80,896

SetupPlatform.exe.mui

1.97.26100.7697

17-Jan-26

1:06

14,224

compatctrl.dll

10.0.26100.7697

17-Jan-26

1:06

230,288

AcRes.dll.mui

10.0.26100.7697

17-Jan-26

1:06

358,400

MediaSetupUIMgr.dll.mui

10.0.26100.7697

17-Jan-26

1:06

87,040

AcRes.dll.mui

10.0.26100.7697

17-Jan-26

1:06

349,696

MediaSetupUIMgr.dll.mui

10.0.26100.7697

17-Jan-26

1:06

86,016

SetupPlatform.exe.mui

1.97.26100.7697

17-Jan-26

1:06

14,208

AcRes.dll.mui

10.0.26100.7697

17-Jan-26

1:06

390,656

MediaSetupUIMgr.dll.mui

10.0.26100.7697

17-Jan-26

1:06

96,256

SetupPlatform.exe.mui

1.97.26100.7697

17-Jan-26

1:06

14,760

DismApi.dll

10.0.26100.7697

17-Jan-26

1:06

2,204,544

AcRes.dll.mui

10.0.26100.7697

17-Jan-26

1:06

408,064

MediaSetupUIMgr.dll.mui

10.0.26100.7697

17-Jan-26

1:06

101,376

SetupPlatform.exe.mui

1.97.26100.7697

17-Jan-26

1:06

14,744

SetupPlatform.exe.mui

1.97.26100.7697

17-Jan-26

1:06

14,232

AcRes.dll.mui

10.0.26100.7697

17-Jan-26

1:06

384,000

MediaSetupUIMgr.dll.mui

10.0.26100.7697

17-Jan-26

1:06

92,672

MediaSetupUIMgr.dll.mui

10.0.26100.7697

17-Jan-26

1:06

83,968

Facilitator.dll

10.0.26100.7697

17-Jan-26

1:06

1,174,912

AcRes.dll.mui

10.0.26100.7697

17-Jan-26

1:06

353,280

MediaSetupUIMgr.dll.mui

10.0.26100.7697

17-Jan-26

1:06

85,504

MediaSetupUIMgr.dll.mui

10.0.26100.7697

17-Jan-26

1:06

100,352

SetupPlatform.exe.mui

1.97.26100.7697

17-Jan-26

1:06

14,720

AcRes.dll.mui

10.0.26100.7697

17-Jan-26

1:06

389,120

MediaSetupUIMgr.dll.mui

10.0.26100.7697

17-Jan-26

1:06

97,792

MediaSetupUIMgr.dll.mui

10.0.26100.7697

17-Jan-26

1:06

72,704

SetupPlatform.exe.mui

1.97.26100.7697

17-Jan-26

1:06

13,696

MediaSetupUIMgr.dll.mui

10.0.26100.7697

17-Jan-26

1:06

89,600

AcRes.dll.mui

10.0.26100.7697

17-Jan-26

1:06

380,416

HwReqChk.dll

Not versioned

17-Jan-26

1:06

815,016

AcRes.dll.mui

10.0.26100.7697

17-Jan-26

1:06

388,608

MediaSetupUIMgr.dll.mui

10.0.26100.7697

17-Jan-26

1:06

93,696

AcRes.dll.mui

10.0.26100.7697

17-Jan-26

1:06

243,712

MediaSetupUIMgr.dll.mui

10.0.26100.7697

17-Jan-26

1:06

58,880

SetupPlatform.exe.mui

1.97.26100.7697

17-Jan-26

1:06

13,208

AcRes.dll.mui

10.0.26100.7697

17-Jan-26

1:06

230,912

MediaSetupUIMgr.dll.mui

10.0.26100.7697

17-Jan-26

1:06

56,320

MediaSetupUIMgr.dll

10.0.26100.7697

17-Jan-26

1:06

1,750,432

AcRes.dll.mui

10.0.26100.7697

17-Jan-26

1:06

350,720

AcRes.dll.mui

10.0.26100.7697

17-Jan-26

1:06

392,192

MediaSetupUIMgr.dll.mui

10.0.26100.7697

17-Jan-26

1:06

90,112

AcRes.dll.mui

10.0.26100.7697

17-Jan-26

1:06

395,264

AcRes.dll.mui

10.0.26100.7697

17-Jan-26

1:06

367,616

AcRes.dll.mui

10.0.26100.7697

17-Jan-26

1:06

370,176

MediaSetupUIMgr.dll.mui

10.0.26100.7697

17-Jan-26

1:06

90,624

ReAgent.dll

10.0.26100.7697

17-Jan-26

1:06

1,271,192

AppXDeploymentServer-Replacement.man

Not versioned

17-Jan-26

1:06

10,650

Content-Indexing-Common-Replacement.man

Not versioned

17-Jan-26

1:06

4,021

FailoverCluster-ClusSvc-Replacement.man

Not versioned

17-Jan-26

1:06

2,481

AppxUpgradeMigrationPlugin.dll

10.0.26100.7697

17-Jan-26

1:06

637,824

ClusterUpgradePlugin.dll

10.0.26100.7697

17-Jan-26

1:06

94,616

VsmKeyMigPlugin.dll

10.0.26100.7697

17-Jan-26

1:06

102,784

tcblaunch-replacement.man

Not versioned

17-Jan-26

1:06

1,935

tpmdriverwmi-replacement.man

Not versioned

17-Jan-26

1:06

2,695

Windows-Internal-Shell-AIX-Config-Replacement.man

Not versioned

17-Jan-26

1:06

1,552

WindowsSearchEngine-replacement.man

Not versioned

17-Jan-26

1:06

6,327

reportgen.dll

10.0.26100.7697

17-Jan-26

1:06

55,192

ReserveManager.dll

10.0.26100.7697

17-Jan-26

1:06

338,832

AcRes.dll.mui

10.0.26100.7697

17-Jan-26

1:06

367,104

MediaSetupUIMgr.dll.mui

10.0.26100.7697

17-Jan-26

1:06

88,576

ServicingCommon.dll

10.0.26100.7697

17-Jan-26

1:06

1,900,336

setupcompat.dll

10.0.26100.7697

17-Jan-26

1:06

356,776

SetupCore.dll

10.0.26100.7697

17-Jan-26

1:06

3,008,896

SetupHost.exe

10.0.26100.7697

17-Jan-26

1:06

913,312

SetupMgr.dll

10.0.26100.7697

17-Jan-26

1:06

1,297,792

SetupPlatform.dll

1.97.26100.7697

17-Jan-26

1:06

10,303,392

SetupPlatform.exe

1.97.26100.7697

17-Jan-26

1:06

238,976

SetupPrep.exe

10.0.26100.7697

17-Jan-26

1:06

1,389,456

AcRes.dll.mui

10.0.26100.7697

17-Jan-26

1:06

359,424

MediaSetupUIMgr.dll.mui

10.0.26100.7697

17-Jan-26

1:06

81,408

AcRes.dll.mui

10.0.26100.7697

17-Jan-26

1:06

347,648

upgrade_bulk.xml

Not versioned

17-Jan-26

1:06

211,949

WinSetupBoot.sys

10.0.26100.7697

17-Jan-26

1:06

91,008

WinSetupMon.sys

10.0.26100.7697

17-Jan-26

1:06

145,840

AcRes.dll.mui

10.0.26100.7697

17-Jan-26

1:06

187,392

MediaSetupUIMgr.dll.mui

10.0.26100.7697

17-Jan-26

1:06

45,568

SetupPlatform.exe.mui

1.97.26100.7697

17-Jan-26

1:06

13,224

MediaSetupUIMgr.dll.mui

10.0.26100.7697

17-Jan-26

1:06

46,080

References

Description of the standard terminology that is used to describe Microsoft software updates

Query words: Setup DU

Need more help?

Want more options?

Explore subscription benefits, browse training courses, learn how to secure your device, and more.