Applies To
Windows Server 2025

Windows Secure Boot certificate expiration 

Important: Secure Boot certificates used by most Windows devices are set to expire starting in June 2026. Microsoft has been updating these certificates on consumer and non-managed business devices for the past months. Devices that haven’t received the newer certificates will continue to start and operate normally, and standard Windows updates will continue to install. We will continue to install the newer certificates via Windows updates in the coming months.

You can check your PC status on the Windows Security app. If you are an IT administrator, follow the guidance on the Secure Boot Playbook for Windows clients and Windows Server.

Summary

This update makes improvements to Windows setup binaries or any files that setup uses for feature updates in Windows Server 2025.

How to get this update

Install this update

To install this update, use one of the following release channels.

Available

Next step

Available

This update is available through Windows Update. It will be downloaded and installed automatically.

Prerequisites

There are no prerequisites to apply this update.

Restart information

You do not have to restart your computer after you apply this update.

Update replacement information

This update does not replace any previously released update.

File information

A list of the files that are included in this update are provided in a CSV (Comma delimited) (*.csv) file. The file can be opened in a text editor such as Notepad or in Microsoft Excel.

Note: The English (United States) version of this software update might contain files for additional languages.

Download Icon​​​​​​​ Download the file information for update KB5095966.

References

Description of the standard terminology that is used to describe Microsoft software updates

Query words: Setup DU

Need more help?

Want more options?

Explore subscription benefits, browse training courses, learn how to secure your device, and more.