KB5082235: Safe OS Dynamic Update for Windows Server, version 23H2: April 14, 2026

適用先

Windows Server, version 23H2

Note

Windows Secure Boot certificate expiration
Important: Secure Boot certificates used by most Windows devices are set to expire starting in June 2026. Microsoft has been updating these certificates on consumer and non-managed business devices for the past months. Devices that haven’t received the newer certificates will continue to start and operate normally, and standard Windows updates will continue to install. We will continue to install the newer certificates via Windows updates in the coming months.
You can check your PC status on the Windows Security app. If you are an IT administrator, follow the guidance on the Secure Boot Playbook for Windows clients and Windows Server.

Summary

This update makes improvements to the Windows recovery environment (WinRE).

Install this update

To install this update, use one of the following release channels.

Available	Next step
	This update is available through Windows Update. It will be downloaded and installed automatically.

Available	Next step
	To get the standalone package for this update, go to the Microsoft Update Catalog website. To download updates from the Update Catalog, see Steps to download updates from the Windows Update Catalog. To manually install this update, see Add an update package to Windows RE.

Available	Next step
	See the other release channels.

Prerequisites	There are no prerequisites to apply this update.
Restart information	You do not have to restart your device after you apply this update.
Removal information	This update cannot be removed once it is applied to a Windows image.
Update replacement information	This update replaces the previously released update KB5078785.
Verify the installation of this update	After installing this update, the WinRE version installed on the device should be 10.0.25398.2271. To find the WinRE version installed, see Methods to verify the WinRE version installed.
File information	A list of the files that are included in this update are provided in a CSV (Comma delimited) (.csv) file. The file can be opened in a text editor such as Notepad or in Microsoft Excel. Note:* The English (United States) version of this software update might contain files for additional languages. Download the file information for update KB5082235.

Query words: safeos du