Summary
This non-security out-of-band (OOB) update for Windows 10, version 1809 and Windows Server 2019 (KB5136490) is cumulative. It includes updates from previous releases, along with additional non-security improvements.
Tip
To learn more about Windows out-of-band (OOB) updates, including the differences between security and non-security updates and guidance for deploying them, see Windows out-of-band (OOB) updates.
Applies to: Windows Server 2019
This update includes fixes and quality improvements that are part of the following update:
The following is a summary of the issues that this update addresses when you install this update. The bold text within the brackets indicates the item or area of the change we are documenting.
- [Licensing and Activation] Fixed: An issue where certain Windows licensing and activation operations using the Software Licensing Management Tool (SLMGR) might fail with error 0x80041008 (Invalid parameter). This issue primarily affected organizations using slmgr.vbs commands or automated processes to configure Key Management Service (KMS) activation, install product keys, or manage Windows licensing. Devices that were already activated remained activated, and devices with existing KMS configurations that did not require additional slmgr.vbs commands were not affected.
Note If you installed earlier updates, only the new updates contained in this package will be downloaded and installed on your device.
Known issues in this update
We are not currently aware of any issues with this update.
Servicing stack update (KB5131084) - 17763.9478
Microsoft now combines the latest servicing stack update (SSU) for your operating system with the latest cumulative update (LCU). SSUs improves the reliability of the update process and includes fixes to the servicing stack, the component that installs Windows updates.
This servicing stack update (SSU) includes enhanced logic to verify whether a device is hosted on Azure, leveraging an updated certificate chain for validation. To ensure that the device can access the required certificate update domains to successfully download and install certificate updates, see Certificate downloads and revocation lists and Azure Certificate Authority details. To learn more about SSUs, see Servicing stack updates.
How to get this update
Before you install this update
For Windows Update: You must have the Windows update released on or after July 8, 2025 (such as KB5062557) installed before installing this update.
For Windows Server Update Services (WSUS) deployment or when installing the standalone package from Microsoft Update Catalog: You must have the Windows update released on or after July 8, 2025 (such as KB5062557) installed before installing this update.
Servicing Stack Update (SSU): You must have the latest SSU installed before installing this update.
Deployment
If you deploy dynamic updates such as this update to an existing Windows image, ensure the boot.stl file is included as part of the installation media. Failure to include the file might prevent devices from successfully starting from the installation media and can result in error code 0xc0430001.
Note
The boot.stl file is used during Secure Boot validation and must match the Windows version and architecture of the image you are updating.
To ensure the boot.stl file is included as part of the installation media, do one of the following:
- Use the Update WinPE script to update an existing Windows image. (Recommended)
- Manually copy the boot.stl file from the device Windows\Boot\EFI folder to the corresponding folder on your installation media before deploying the update.
For information about how to apply Dynamic Update packages to existing Windows images, see Update Windows installation media with Dynamic Update.
Get and install this update
To get and install this update, use one of the following Windows or Microsoft release channels.
| Available | Next Step |
|---|---|
|
This update is available from the Microsoft Update Catalog. |
File information
A list of the files that are included in this update are provided in a CSV (Comma delimited) (*.csv) file. The file can be opened in a text editor such as Notepad or in Microsoft Excel.
Note The English (United States) version of this software update might contain files for additional languages.
Download the file information for out-of-band update KB5136490.
Download the file information for SSU (KB5131084) - version 17763.9478.
References
For information about Windows update terminology, see types of Windows updates and monthly quality update types.
For an overview of Windows 10, version 1809 or Windows Server 2019, see its update history page.
Related topics
Microsoft Store application updates
Windows updates do not install Microsoft Store application updates. If you are an enterprise user, see Microsoft Store apps - Configuration Manager. If you are a consumer user, see Get updates for apps and games in Microsoft Store.Secure Boot certificate updates remain in progress as Microsoft transitions devices from certificates that began expiring in 2026 to newer certificates. Devices that have not yet received the newer certificates can continue to start and receive standard Windows updates. Microsoft will continue delivering the newer Secure Boot certificates to eligible devices through Windows Update.
End of support
Microsoft will no longer provide free software updates from Windows Update, technical assistance, or security fixes on the following end dates. We recommend that you upgrade to a later version of Windows Server.
- Windows 10 Enterprise LTSC 2019: January 9, 2029
- Windows Server 2019: January 9, 2029
Change log
| Change date | Change description |
|---|---|
| November 13, 2026 | This is the original publish date for this update |