Solved Here we go again - it's Patch Tuesday (Apr 14, 2026)


I would be curious to know if something you installed is allowing the updates to be skipped for that long a period of time
No, just a standard Win 11 Pro install. I haven't installed anything that tweaks it or the Registry.
 

My Computer My Computer

At a glance

Windows 11 Pro
OS
Windows 11 Pro

My Computer My Computer

At a glance

windows 10 21h2
OS
windows 10 21h2
Funny you should ask. :-)


That's if you use a weirdo BitLocker setup, trying to use PCR7 when the system doesn't allow it. I can't think of any reason a home user would set this up, and a business should be validating configs before using them.

Edit... from the known issues in the KB article:

This issue only affects a limited number of systems in which ALL of the following conditions are true. These conditions are unlikely to be found on personal devices not managed by IT departments.

  1. BitLocker is enabled on the OS drive.
  2. The Group Policy "Configure TPM platform validation profile for native UEFI firmware configurations" is configured, and PCR7 is included in the validation profile (or the equivalent registry key is set manually).
  3. System Information (msinfo32.exe) reports Secure Boot State PCR7 Binding as "Not Possible".
  4. The Windows UEFI CA 2023 certificate is present in the device’s Secure Boot Signature Database (DB), making the device eligible for the 2023‑signed Windows Boot Manager to be made the default.
  5. The device is not already running the 2023-signed Windows Boot Manager.
 

My Computer My Computer

At a glance

Windows 11 Enterprise 25H2 [rev. 8893]
OS
Windows 11 Enterprise 25H2 [rev. 8893]
I just updated to Win 11 Pro 25H2 (OS Build 26200.8457) and I still get the option to defer updates for years:

 

My Computer My Computer

At a glance

Windows 11 Pro
OS
Windows 11 Pro
Back
Top Bottom