Windows Secure Boot certificate expirationÂ
Important: Secure Boot certificates used by most Windows devices are set to expire starting in June 2026. Microsoft has been updating these certificates on consumer and non-managed business devices for the past months. Devices that haven’t received the newer certificates will continue to start and operate normally, and standard Windows updates will continue to install. We will continue to install the newer certificates via Windows updates in the coming months.
You can check your PC status on the Windows Security app. If you are an IT administrator, follow the guidance on the Secure Boot Playbook for Windows clients and Windows Server.
Summary
This servicing stack update (SSU) makes quality improvements to the servicing stack, which is the component that installs Windows updates. Servicing stack updates make sure that you have a robust and reliable servicing stack so that your devices can receive and install Microsoft updates.
Important Not installing the latest SSU before applying Windows updates might result in the Windows update not being offered until the latest SSU is installed.
How to get this update
Install this update
To install this update, use one of the following release channels.
|
Available |
Next step |
|
|
This update is available through Windows Update. It will be downloaded and installed automatically. |
|
Available |
Next step |
|
|
To get the standalone package for this update, go to the Microsoft Update Catalog website. To download updates from the Update Catalog, see Steps to download updates from the Windows Update Catalog. |
|
Available |
Next step |
|
|
This update will automatically sync with Windows Server Update Services (WSUS) if you configure Products and Classifications as follows:
To set up your WSUS server to sync based on products and classifications, see Synchronizing Update by Product and Classification. To manually import updates into WSUS, see Import updates into WSUS by using PowerShell. |
More information about this update
|
Prerequisites |
There are no prerequisites to apply this update. |
|
Restart information |
You might have to restart your computer after you apply this update. |
|
Removal information |
Servicing stack updates (SSUs) make changes to how updates are installed and cannot be uninstalled from the device. |
|
Update replacement information |
This update replaces the previously released update KB5088064. |
|
File information |
A list of the files that are included in this update are provided in a CSV (Comma delimited) (*.csv) file. The file can be opened in a text editor such as Notepad or in Microsoft Excel. Note: The English (United States) version of this software update might contain files for additional languages.
|
Related topics
ADV990001 | Latest Servicing Stack Updates
The benefits of Windows 10 Dynamic Update
Updating Windows 10 media with Dynamic Update packages
Description of the standard terminology that is used to describe Microsoft software updates
