Summary
This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. Servicing stack updates (SSU) makes sure that you have a robust and reliable servicing stack so that your devices can receive and install Microsoft updates.
Important
Not installing the latest SSU before applying Windows updates might result in the Windows update not being offered until the latest SSU is installed.
The following is a summary of the issues that this update addresses when you install this update. The bold text within the brackets indicates the item or area of the change we are documenting.
- [Licensing] Fixed: An issue that could cause Extended Security Updates (ESU) to fail to install on an Azure Arc-enabled Windows Server 2012 R2 device that has restricted network access, due to a certificate validation failure. This update resolves the failure, so the ESU installation completes successfully.
How to get this update
Install this update
To install this update, use one of the following release channels.
| Available | Next step |
|---|---|
|
This update is available through Windows Update. It will be downloaded and installed automatically. |
About this update
| Information | Details |
|---|---|
| Prerequisites | There are no prerequisites to apply this update. |
| Restart information | You do not have to restart your computer after you apply this update. |
| Removal information | Servicing stack updates (SSUs) make changes to how updates are installed and cannot be uninstalled from the device. |
| Update replacement information | This update replaces the previously released update KB5079233. |
| File information | A list of the files included in this update is provided in a CSV (comma-delimited) (.csv) file. You can open the file in a text editor, such as Notepad, or in Microsoft Excel. Note The English (United States) version of this software update might contain files for additional languages. 
Download the file information for update KB5106412. |
References
- Servicing stack updates
- ADV990001 | Latest Servicing Stack Updates
- Description of the standard terminology that is used to describe Microsoft software updates
Related topics
Note
- Windows Secure Boot certificate expiration
- Important: Secure Boot certificates used by most Windows devices are set to expire starting in June 2026. Microsoft has been updating these certificates on consumer and non-managed business devices for the past months. Devices that haven’t received the newer certificates will continue to start and operate normally, and standard Windows updates will continue to install. We will continue to install the newer certificates via Windows updates in the coming months.
- You can check your PC status on the Windows Security app. If you are an IT administrator, follow the guidance on the Secure Boot Playbook for Windows clients and Windows Server.
Note
- Support for Windows Server 2012 R2 will end in October 2026
- Windows Server 2012 R2 reached the end of support (EOS) on October 10, 2023.
- Extended Security Updates (ESUs) are available for purchase and will continue for three years, renewable on an annual basis, until the final date on October 13, 2026. For information about the procedure to continue receiving security updates, see KB5031043.
- We recommend that you upgrade to a later version of Windows Server. For more information, see Overview of Windows Server upgrades.