Windows Secure Boot certificate expirationÂ
Important: Secure Boot certificates used by most Windows devices are set to expire starting in June 2026. This might affect the ability of certain personal and business devices to boot securely if not updated in time. To avoid disruption, we recommend reviewing the guidance and taking action to update certificates in advance. For details and preparation steps, see Windows Secure Boot certificate expiration and CA updates.
Support for Windows Server 2012 will end in October 2026
Windows Server 2012 reached the end of support (EOS) on October 10, 2023.Â
Extended Security Updates (ESUs) are available for purchase and will continue for three years, renewable on an annual basis, until the final date on October 13, 2026. For information about the procedure to continue receiving security updates, see KB5031043.Â
We recommend that you upgrade to a later version of Windows Server. For more information, see Overview of Windows Server upgrades.
Summary
This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. Servicing stack updates (SSU) makes sure that you have a robust and reliable servicing stack so that your devices can receive and install Microsoft updates.
|
Servicing Stack Update (SSU) Guidance for ESU and Azure-Hosted Devices This servicing stack update (SSU) introduces enhanced logic to verify whether a device is hosted in Azure, leveraging an updated certificate chain for validation. To ensure seamless installation of future updates on Azure-hosted devices, it is strongly recommended to install this latest SSU prior to applying any additional updates. Key Requirements for IT Admins Certificate Access Ensure that the device can access the required certificate update domains to successfully download and install certificate updates. For more information, see the following resources: Intermediate Certificate Change An intermediate certificate change will soon be deployed across Azure regions. Before applying updates, verify that your environment is prepared for this change. For guidance, see: ESU Validation Check To confirm whether your machines are eligible for Extended Security Updates (ESU), IT admins should validate the following:
|
Important Not installing the latest SSU before applying Windows updates might result in the Windows update not being offered until the latest SSU is installed.
How to get this update
Install this update
To install this update, use one of the following release channels.
|
Available |
Next step |
|
Yes |
This update is available through Windows Update. It will be downloaded and installed automatically. |
|
Available |
Next step |
|
Yes |
To get the standalone package for this update, go to the Microsoft Update Catalog website. To download updates from the Update Catalog, see Steps to download updates from the Windows Update Catalog. |
|
Available |
Next step |
|
Yes |
This update will automatically sync with Windows Server Update Services if you have Classifications and Products configured as follows:
|
|
Prerequisites |
There are no prerequisites to apply this update. |
|
Restart information |
You must restart your computer after you apply this update. |
|
Removal information |
Servicing stack updates (SSUs) make changes to how updates are installed and cannot be uninstalled from the device. |
|
Update replacement information |
This update replaces the previously released update KB5066795. |
File Information
The English (United States) version of this software update installs files that have the following attributes. This update might contain files for additional languages.
|
File name |
File version |
Date |
Time |
File size |
|
securebootai.dll |
6.2.9200.25768 |
27-Oct-25 |
21:56 |
175,104 |
|
winsockai.dll |
6.2.9200.25768 |
27-Oct-25 |
21:56 |
60,928 |
|
ws2_helper.dll |
6.2.9200.25768 |
27-Oct-25 |
21:56 |
59,904 |
|
httpai.dll |
6.2.9200.25768 |
27-Oct-25 |
21:56 |
52,224 |
|
peerdistai.dll |
6.2.9200.25768 |
27-Oct-25 |
21:56 |
67,584 |
|
PrintAdvancedInstaller.dll |
6.2.9200.25768 |
27-Oct-25 |
21:56 |
71,168 |
|
msdtcadvancedinstaller.dll |
6.2.9200.25768 |
27-Oct-25 |
21:56 |
239,616 |
|
cleanupai.dll |
6.2.9200.25768 |
27-Oct-25 |
21:56 |
32,256 |
|
wdscore.dll |
6.2.9200.25768 |
27-Oct-25 |
21:56 |
290,304 |
|
CntrtextInstaller.dll |
6.2.9200.25768 |
27-Oct-25 |
21:56 |
165,376 |
|
drvstore.dll |
6.2.9200.25768 |
27-Oct-25 |
21:56 |
696,320 |
|
dpx.dll |
6.2.9200.25768 |
27-Oct-25 |
21:56 |
362,496 |
|
msdelta.dll |
6.2.9200.25768 |
27-Oct-25 |
21:56 |
414,208 |
|
mspatcha.dll |
6.2.9200.25768 |
27-Oct-25 |
21:56 |
45,056 |
|
PkgMgr.exe |
6.2.9200.25768 |
27-Oct-25 |
21:56 |
196,096 |
|
cmiv2.dll |
6.2.9200.25768 |
27-Oct-25 |
21:56 |
3,305,472 |
|
cmitrust.dll |
6.2.9200.25768 |
27-Oct-25 |
21:56 |
407,552 |
|
WcmTypes.xsd |
Not versioned |
25-Oct-25 |
18:24 |
1,047 |
|
CbsMsg.dll |
6.2.9200.25768 |
27-Oct-25 |
21:56 |
41,472 |
|
CbsCore.dll |
6.2.9200.25768 |
27-Oct-25 |
21:56 |
1,165,824 |
|
TiWorker.exe |
6.2.9200.25768 |
27-Oct-25 |
21:56 |
189,440 |
|
TiFileFetcher.exe |
6.2.9200.25768 |
27-Oct-25 |
21:56 |
460,800 |
|
DrUpdate.dll |
6.2.9200.25768 |
27-Oct-25 |
21:56 |
244,224 |
|
wrpint.dll |
6.2.9200.25768 |
27-Oct-25 |
21:56 |
60,416 |
|
wcp.dll |
6.2.9200.25768 |
27-Oct-25 |
21:56 |
2,837,504 |
|
cmiadapter.dll |
6.2.9200.25768 |
27-Oct-25 |
21:56 |
116,736 |
|
smiengine.dll |
6.2.9200.25768 |
27-Oct-25 |
21:56 |
896,000 |
|
smipi.dll |
6.2.9200.25768 |
27-Oct-25 |
21:56 |
110,592 |
|
poqexec.exe |
6.2.9200.25768 |
27-Oct-25 |
21:56 |
148,480 |
|
amd64_installed |
Not versioned |
25-Oct-25 |
18:20 |
9 |
|
cmipnpinstall.dll |
6.2.9200.25768 |
27-Oct-25 |
21:56 |
250,880 |
|
bfsvc.dll |
6.2.9200.25768 |
27-Oct-25 |
21:56 |
101,376 |
|
netfxconfig.dll |
6.2.9200.25768 |
27-Oct-25 |
21:56 |
34,304 |
|
timezoneai.dll |
6.2.9200.25768 |
27-Oct-25 |
21:56 |
75,264 |
|
ConfigureIEOptionalComponentsAI.dll |
6.2.9200.25768 |
27-Oct-25 |
21:56 |
73,216 |
|
IEFileInstallAI.dll |
6.2.9200.25768 |
27-Oct-25 |
21:56 |
58,880 |
|
GlobalInstallOrder.xml |
Not versioned |
25-Oct-25 |
18:24 |
2,240,509 |
|
servicemodelregai.dll |
6.2.9200.25768 |
27-Oct-25 |
21:56 |
116,224 |
|
SetIEInstalledDateAI.dll |
6.2.9200.25768 |
27-Oct-25 |
21:56 |
42,496 |
|
ceipfwdai.dll |
6.2.9200.25768 |
27-Oct-25 |
21:56 |
212,480 |
|
luainstall.dll |
6.2.9200.25768 |
27-Oct-25 |
21:56 |
50,688 |
|
bcdeditai.dll |
6.2.9200.25768 |
27-Oct-25 |
21:56 |
300,032 |
|
appxreg.dll |
6.2.9200.25768 |
27-Oct-25 |
21:56 |
15,872 |
|
fveupdateai.dll |
6.2.9200.25768 |
27-Oct-25 |
21:56 |
57,344 |
|
RegisterIEPKeysAI.dll |
6.2.9200.25768 |
27-Oct-25 |
21:56 |
19,456 |
|
ExtendedSecurityUpdatesAI.dll |
6.2.9200.25768 |
27-Oct-25 |
21:56 |
192,000 |
|
mofinstall.dll |
6.2.9200.25768 |
27-Oct-25 |
21:56 |
71,168 |
|
esscli.dll |
6.2.9200.25768 |
27-Oct-25 |
21:56 |
385,024 |
|
mofd.dll |
6.2.9200.25768 |
27-Oct-25 |
21:56 |
259,584 |
|
repdrvfs.dll |
6.2.9200.25768 |
27-Oct-25 |
21:56 |
366,592 |
|
fastprox.dll |
6.2.9200.25768 |
27-Oct-25 |
21:56 |
817,152 |
|
wbemcomn.dll |
6.2.9200.25768 |
27-Oct-25 |
21:56 |
462,336 |
|
wbemcore.dll |
6.2.9200.25768 |
27-Oct-25 |
21:56 |
1,207,296 |
|
wmiutils.dll |
6.2.9200.25768 |
27-Oct-25 |
21:56 |
115,712 |
|
wbemprox.dll |
6.2.9200.25768 |
27-Oct-25 |
21:56 |
35,840 |
|
wmicmiplugin.dll |
6.2.9200.25768 |
27-Oct-25 |
21:56 |
556,544 |
|
sppinst.dll |
6.2.9200.25768 |
27-Oct-25 |
21:56 |
641,536 |
|
cmifw.dll |
6.2.9200.25768 |
27-Oct-25 |
21:56 |
89,088 |
|
FirewallOfflineAPI.dll |
6.2.9200.25768 |
27-Oct-25 |
21:56 |
211,968 |
|
appserverai.dll |
6.2.9200.25768 |
27-Oct-25 |
21:56 |
135,680 |
|
RDWebAI.dll |
6.2.9200.25768 |
27-Oct-25 |
21:56 |
126,976 |
|
tssdisai.dll |
6.2.9200.25768 |
27-Oct-25 |
21:56 |
145,408 |
|
VmHostAI.dll |
6.2.9200.25768 |
27-Oct-25 |
21:56 |
123,392 |
|
securebootai.dll |
6.2.9200.25768 |
27-Oct-25 |
21:32 |
157,696 |
|
winsockai.dll |
6.2.9200.25768 |
27-Oct-25 |
21:32 |
64,512 |
|
ws2_helper.dll |
6.2.9200.25768 |
27-Oct-25 |
21:32 |
48,128 |
|
httpai.dll |
6.2.9200.25768 |
27-Oct-25 |
21:32 |
54,272 |
|
peerdistai.dll |
6.2.9200.25768 |
27-Oct-25 |
21:32 |
66,048 |
|
PrintAdvancedInstaller.dll |
6.2.9200.25768 |
27-Oct-25 |
21:32 |
72,704 |
|
msdtcadvancedinstaller.dll |
6.2.9200.25768 |
27-Oct-25 |
21:32 |
200,704 |
|
cleanupai.dll |
6.2.9200.25768 |
27-Oct-25 |
21:32 |
36,864 |
|
wdscore.dll |
6.2.9200.25768 |
27-Oct-25 |
21:32 |
223,744 |
|
CntrtextInstaller.dll |
6.2.9200.25768 |
27-Oct-25 |
21:32 |
139,776 |
|
drvstore.dll |
6.2.9200.25768 |
27-Oct-25 |
21:32 |
548,864 |
|
dpx.dll |
6.2.9200.25768 |
27-Oct-25 |
21:32 |
253,952 |
|
msdelta.dll |
6.2.9200.25768 |
27-Oct-25 |
21:32 |
310,784 |
|
mspatcha.dll |
6.2.9200.25768 |
27-Oct-25 |
21:32 |
38,912 |
|
PkgMgr.exe |
6.2.9200.25768 |
27-Oct-25 |
21:32 |
194,048 |
|
cmiv2.dll |
6.2.9200.25768 |
27-Oct-25 |
21:32 |
2,165,248 |
|
cmitrust.dll |
6.2.9200.25768 |
27-Oct-25 |
21:32 |
289,792 |
|
WcmTypes.xsd |
Not versioned |
26-Oct-25 |
17:36 |
1,047 |
|
CbsMsg.dll |
6.2.9200.25768 |
27-Oct-25 |
21:32 |
41,472 |
|
CbsCore.dll |
6.2.9200.25768 |
27-Oct-25 |
21:32 |
1,010,176 |
|
TiWorker.exe |
6.2.9200.25768 |
27-Oct-25 |
21:32 |
186,880 |
|
TiFileFetcher.exe |
6.2.9200.25768 |
27-Oct-25 |
21:32 |
380,928 |
|
DrUpdate.dll |
6.2.9200.25768 |
27-Oct-25 |
21:32 |
193,024 |
|
wrpint.dll |
6.2.9200.25768 |
27-Oct-25 |
21:32 |
58,880 |
|
wcp.dll |
6.2.9200.25768 |
27-Oct-25 |
21:32 |
2,189,824 |
|
cmiadapter.dll |
6.2.9200.25768 |
27-Oct-25 |
21:32 |
104,960 |
|
smiengine.dll |
6.2.9200.25768 |
27-Oct-25 |
21:32 |
700,928 |
|
smipi.dll |
6.2.9200.25768 |
27-Oct-25 |
21:32 |
102,400 |
|
poqexec.exe |
6.2.9200.25768 |
27-Oct-25 |
21:32 |
132,608 |
|
x86_installed |
Not versioned |
26-Oct-25 |
17:24 |
9 |
|
cmipnpinstall.dll |
6.2.9200.25768 |
27-Oct-25 |
21:32 |
191,488 |
|
bfsvc.dll |
6.2.9200.25768 |
27-Oct-25 |
21:32 |
99,840 |
|
netfxconfig.dll |
6.2.9200.25768 |
27-Oct-25 |
21:32 |
40,448 |
|
timezoneai.dll |
6.2.9200.25768 |
27-Oct-25 |
21:32 |
67,584 |
|
ConfigureIEOptionalComponentsAI.dll |
6.2.9200.25768 |
27-Oct-25 |
21:32 |
69,632 |
|
IEFileInstallAI.dll |
6.2.9200.25768 |
27-Oct-25 |
21:32 |
59,904 |
|
GlobalInstallOrder.xml |
Not versioned |
26-Oct-25 |
17:38 |
2,240,509 |
|
servicemodelregai.dll |
6.2.9200.25768 |
27-Oct-25 |
21:32 |
96,768 |
|
SetIEInstalledDateAI.dll |
6.2.9200.25768 |
27-Oct-25 |
21:32 |
41,984 |
|
ceipfwdai.dll |
6.2.9200.25768 |
27-Oct-25 |
21:32 |
180,736 |
|
luainstall.dll |
6.2.9200.25768 |
27-Oct-25 |
21:32 |
39,936 |
|
bcdeditai.dll |
6.2.9200.25768 |
27-Oct-25 |
21:32 |
285,184 |
|
appxreg.dll |
6.2.9200.25768 |
27-Oct-25 |
21:32 |
22,528 |
|
fveupdateai.dll |
6.2.9200.25768 |
27-Oct-25 |
21:32 |
56,832 |
|
RegisterIEPKeysAI.dll |
6.2.9200.25768 |
27-Oct-25 |
21:32 |
24,576 |
|
ExtendedSecurityUpdatesAI.dll |
6.2.9200.25768 |
27-Oct-25 |
21:32 |
154,624 |
|
mofinstall.dll |
6.2.9200.25768 |
27-Oct-25 |
21:32 |
61,440 |
|
esscli.dll |
6.2.9200.25768 |
27-Oct-25 |
21:32 |
283,648 |
|
mofd.dll |
6.2.9200.25768 |
27-Oct-25 |
21:32 |
196,608 |
|
repdrvfs.dll |
6.2.9200.25768 |
27-Oct-25 |
21:32 |
275,456 |
|
fastprox.dll |
6.2.9200.25768 |
27-Oct-25 |
21:32 |
629,760 |
|
wbemcomn.dll |
6.2.9200.25768 |
27-Oct-25 |
21:32 |
380,928 |
|
wbemcore.dll |
6.2.9200.25768 |
27-Oct-25 |
21:32 |
924,672 |
|
wmiutils.dll |
6.2.9200.25768 |
27-Oct-25 |
21:32 |
88,576 |
|
wbemprox.dll |
6.2.9200.25768 |
27-Oct-25 |
21:32 |
28,160 |
|
wmicmiplugin.dll |
6.2.9200.25768 |
27-Oct-25 |
21:32 |
396,288 |
|
sppinst.dll |
6.2.9200.25768 |
27-Oct-25 |
21:32 |
519,168 |
|
cmifw.dll |
6.2.9200.25768 |
27-Oct-25 |
21:32 |
73,728 |
|
FirewallOfflineAPI.dll |
6.2.9200.25768 |
27-Oct-25 |
21:32 |
181,760 |
References
Servicing Stack Updates (SSU): Frequently Asked Questions
ADV990001 | Latest Servicing Stack Updates
Description of the standard terminology that is used to describe Microsoft software updates
