Win Update KB5068861 Windows 11 Cumulative Update build 26100.7171 (24H2) and 26200.7171 (25H2) - Nov. 11


UPDATE 12/01:


 Microsoft Support:

November 11, 2025 - KB5068861 (OS Builds 26200.7171 and 26100.7171)​

This cumulative update for Windows 11, version 25H2 and 24H2 (KB5068861), includes the latest security fixes and improvements, along with non-security updates from last month’s optional preview release. To learn more about differences between security updates, optional non-security preview updates, out-of-band (OOB) updates, and continuous innovation, see Windows monthly updates explained. For information on Windows update terminology, see the different types of Windows software updates.

To view the latest updates about this release, visit the Windows release health dashboard or the update history page for Windows 11, version 25H2 and 24H2.

Announcements and messages

This section provides key notifications related to this release, including announcements, change logs, and end-of-support notices.

Simplified Windows update titles​

A new, standardized title format makes Windows updates easier to read and understand. It improves clarity by removing unnecessary technical elements like platform architecture. Key identifiers such as date prefixes, the KB number, and build or version are retained to help you quickly recognize each update.

For more details, see Simplified Windows Update titles or its accompanying blog post.

December servicing update schedule​

Due to reduced operations during the Western holidays in December and New Year's Day, Microsoft will not release a non-security preview update in December 2025. The monthly security update will still be available as scheduled. Regular monthly servicing, including both security updates and non-security preview updates, will resume in January 2026.

Windows Secure Boot certificate expiration​

Important: Secure Boot certificates used by most Windows devices are set to expire starting in June 2026. This might affect the ability of certain personal and business devices to boot securely if not updated in time. To avoid disruption, we recommend reviewing the guidance and taking action to update certificates in advance. For details and preparation steps, see Windows Secure Boot certificate expiration and CA updates.


Microsoft Store apps updates​

Windows Updates do not include updates for Microsoft Store apps.

If you're an enterprise user, see Microsoft Store apps - Configuration Manager.

If you're a consumer user, see Get updates for apps and games in Microsoft Store.


Highlights

  • This update addresses security issues for your Windows operating system.

Improvements

This security update contains fixes and quality improvements from KB5067036 (released October 28, 2025). The following summary outlines key issues addressed by this update. Also, included are available new features. The bold text within the brackets indicates the item or area of the change.
  • [Gaming]
    • Fixed: This update addresses an issue that affects gaming handheld devices. These devices were unable to stay in low-power states, which caused faster battery drain.
    • Fixed: This update addresses an issue on some handheld gaming devices where after signing in using the built-in Gamepad, the controller might not respond in apps for about five seconds, causing a delay. After you submit your password or PIN, the touch keyboard on the sign-in screen hides automatically.
  • [Storage] Fixed: This update addresses an issue that could cause some Storage Spaces to become inaccessible or Storage Spaces Direct to fail when creating a storage cluster.
  • [System utilities (known issue)] Fixed: This update addresses an issue where closing Task Manager with the Close button didn’t fully end the process, leaving background instances that could slow performance over time. This might occur after installing KB5067036.
  • [Voice Access] Fixed: This update addresses an issue where Voice Access failed during initial setup if no microphone was connected and the voice model wasn’t installed.
  • [Window management] Fixed: This update addresses an issue where selecting the desktop could unexpectedly open Task View.
  • [Networking] Fixed: This update fixes an issue in the HTTP.sys request parser, a Windows component that reads and processes HTTP requests. The parser allowed a single line break within HTTP/1.1 chunk extensions, where the RFC 9112 standard requires a carriage return and line feed (CRLF) sequence to terminate each chunk. This can cause a parsing discrepancy when front end proxies are a part of the setup.

    To turn off strict parsing, use the following registry key:

    Registry Key: [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Http\Parameters]
    Registry value: "HttpAllowLenientChunkExtParsing"=dword:00000001
    Data to be set: 1
If you've already installed previous updates, your device will download and install only the new updates included in this package.

For more information about security vulnerabilities, see the Security Update Guide website and the November 2025 Security Updates.

AI Components

This release updates the following AI components:

AI ComponentVersion
Image Search1.2510.1159.0
Content Extraction1.2510.1159.0
Semantic Analysis1.2510.1159.0
Settings Model1.2510.1159.0

Windows 11 servicing stack update (KB5067035)- 26100.7010

This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. Servicing stack updates (SSU) ensure that you have a robust and reliable servicing stack so that your devices can receive and install Microsoft updates. To learn more about SSUs, see Simplifying on-premises deployment of servicing stack updates.

Known issues in this update

1 Password icon might be missing or invisible in the lock screen sign-in options

Symptoms

After installing the August 2025 non-security preview update (KB5064081) or later updates, you might notice that the password icon is not visible in the sign-in options on the lock screen. If you hover over the space where the icon should appear, you’ll see that the password button is still available. Select this placeholder to open the password text box and enter your password. After entering your password, you can sign in normally.

Workaround

Microsoft is working to resolve this issue and will provide information when it’s available.

How to get this update

Before you install this update

Microsoft combines the latest servicing stack update (SSU) for your operating system with the latest cumulative update (LCU). For general information about SSUs, see Servicing stack updates and Servicing Stack Updates (SSU): Frequently Asked Questions.

Install this update

To install this update, use one of the following Windows and Microsoft release channels.

AvailableNext Step
Included
This update downloads and installs automatically from Windows Update and Microsoft Update.
Yes 1Before you install this update

To get the standalone package(s) for this update, go to the Microsoft Update Catalog website. This KB contains one or more MSU files that require installation in a specific order.

Install this update
Method 1: Install all MSU files together


Download all MSU files for KB5068861 from Microsoft Update Catalog and place them in the same folder (for example, C:/Packages). Use Deployment Image Servicing and Management (DISM.exe) to install the target update. DISM will use the folder specified in PackagePath to discover and install one or more prerequisite MSU files as needed.

Updating Windows PC

To apply this update to a running Windows PC, run the following command from an elevated Command Prompt:

DISM /Online /Add-Package /PackagePath:c:\packages\Windows11.0-KB5068861-x64.msu

Or, run the following command from an elevated Windows PowerShell prompt:

Add-WindowsPackage -Online -PackagePath "c:\packages\Windows11.0-KB5068861-x64.msu"

Or use Windows Update Standalone Installer to install the target update.

Updating Windows Installation media

To apply this update to Windows Installation media, see Update Windows installation media with Dynamic Update.

Note: When downloading other Dynamic Update packages, ensure they match the same month as this KB. If the SafeOS Dynamic Update or Setup Dynamic Update is not available for the same month as this KB, use the most recently published version of each.

To add this update to a mounted image, run the following command from an elevated Command Prompt:

DISM /Image:mountdir /Add-Package /PackagePath:Windows11.0-KB5068861-x64.msu

Or, run the following command from an elevated Windows PowerShell prompt:

Add-WindowsPackage -Path "c:\offline" -PackagePath "Windows11.0-KB5068861-x64.msu" -PreventPending

Method 2: Install each MSU file individually, in order

Download and install each MSU file individually either using DISM or Windows Update Standalone Installer in the following order:
  1. windows11.0-kb5043080-x64_953449672073f8fb99badb4cc6d5d7849b9c83e8.msu
  2. windows11.0-kb5068861-x64_199ed7806a74fe78e3b0ef4f2073760000f71972.msu
1 This latest cumulative update includes updates for AI components. Even though the AI component updates are included in the update, the AI components are only applicable to Windows Copilot+ PCs and will not install on Windows PC or Windows Server.

If you want to remove the LCU

To remove the LCU after installing the combined SSU and LCU package, use the DISM/Remove-Package command line option with the LCU package name as the argument. You can find the package name by using this command: DISM /online /get-packages.

Running Windows Update Standalone Installer (wusa.exe) with the /uninstall switch on the combined package will not work because the combined package contains the SSU. You cannot remove the SSU from the system after installation.

File information

For a list of the files provided in this update, download the file information for cumulative update 5068861.

For a list of the files provided in the servicing stack update, download the file information for the SSU (KB5067035) - version 26100.7010.



 Source:



Check Windows Updates


ISO or USB from Microsoft Media Creation Tool (MCT):



UUP Dump:

64-bit ISO download:

ARM64 ISO download:

 
Last edited:
Thank you... :-)
 

My Computers

System One System Two

  • OS
    Windows 11 Pro 25H2 26200.8457
    Computer type
    PC/Desktop
    Manufacturer/Model
    Dell Tower Plus EBT2250, DOB: 06/15/2025
    CPU
    Intel® Core™ Ultra 7 265 1.8GHz to 5.3GHz (Arrow Lake)
    Motherboard
    Dell Inc. 02D3NT A00 (U3E1)
    Memory
    SK Hynix 32GB DDR5 5600 Desktop RAM UDIMM Non-ECC PC5-5600B
    Graphics Card(s)
    Dell NVIDIA® GeForce RTX™ 4060 8GB GDDR6 & (iGPU) Integrated Intel® UHD Graphics
    Sound Card
    Chipset Realtek High-Definition Audio with Dolby Atmos
    Monitor(s) Displays
    Dell Ultra Sharp U2515H 25-Inch Screen LED-Lit
    Screen Resolution
    2560 X 1440
    Hard Drives
    Samsung (NVMe PM9C1a 1024GB) M.2 PCIe NVMe Solid State Drive (OS), with Samsung Piccolo (S4LY022) 6-Core 4 Channel Controller.

    Samsung T7 500GB SSD, USB-C External Drive
    PSU
    Dell 460W
    Case
    Dell Tower Plus EBT 2250
    Cooling
    Fan
    Keyboard
    Dell Wired Keyboard - KB216
    Mouse
    Logitech M510
    Internet Speed
    Intel Killer E3100G 2.5 Gigabit Ethernet Controller
    Browser
    Microsoft Edge
    Antivirus
    Microsoft Windows Security
    Other Info
    The Samsung NVMe PM9C1a 1024GB SSD does not use a Phison NAND controller. Instead, it uses Samsung's in-house developed Piccolo (S4LY022) 6-Core 4 Channel Controller. The PM9C1a utilizes a controller built using Samsung's 5-nanometer process and seventh-generation V-NAND technology. 🤔
  • Operating System
    Windows 11 Pro 25H2 26200.8457
    Computer type
    Laptop
    Manufacturer/Model
    Dell Inspiron 15 7000 (7591) 2-in-1, DOB: 11/30/2019
    CPU
    10th Generation Intel Core i7-10510U Processor (8MB Cache, up to 4.9 GHz) Comet Lake
    Motherboard
    Dell 0NNW5N
    Memory
    16GB DDR4 RAM
    Graphics card(s)
    NVIDIA® GeForce® MX250 with 2GB GDDR5 graphics memory
    Sound Card
    Chipset Realtek ALC3254 🤔🤣
    Monitor(s) Displays
    Dell 15.6-inch UHD Truelife Touch Narrow Border WVA Display with Active Pen support
    Screen Resolution
    3840 x 2160
    Hard Drives
    Intel NVME 512GB SSD with 32GB Intel Optane Memory, M.2 80mm PCIe 3.0 RAID

    SanDisk 256GB Extreme microSDXC UHS-I Memory Card
    PSU
    Dell 4-Cell Battery, 68 Whr (Integrated), 90 Watt AC Adapter
    Case
    Dell Inspiron 15 7000 2-in-1 (7591)
    Cooling
    Standard Dell Case Fan & Havit HV-F2056 USB Powered (3 Fans) Laptop Cooling Pad.
    Keyboard
    Dell
    Mouse
    Logitech Wireless Mouse M650L
    Internet Speed
    Wireless/Wired connectivity (WiFi 6 - 802.11 ax)
    Browser
    Microsoft Edge
    Antivirus
    Microsoft Windows Security
    Other Info
    From Dell: 512GB NVME Solid State Drive accelerated by 32GB Intel Optane Memory are the fastest as compared to NAND SSDs. Intel Optane H10 with SSD offers speedy storage and accelerates opening your programs.
Yes , used the official Win11-ISO ( made by RUFUS-USB ) for upgrading from 24H2 to 25H2 , went fine ( only a lot of my setting and some software were lost ) , after installed connected to internet again and got some updates .
Then next updates ended with ; 0x800f0983 , had to repair with the same ISO , updated fine after repair .
Next update again same problem , same way of repair .
Then , latest November-update went fine without problems , no need to repair !
Seems this latest update fixed several install-problems ( 0x800f0983 )...................so finally everything seems to be OK ! :-)
 

My Computer

System One

  • OS
    Windows11 Pro 25H2
    Computer type
    PC/Desktop
    Manufacturer/Model
    Asus
    CPU
    i7
    Motherboard
    z97k
    Memory
    32GB
    Graphics Card(s)
    nVidia
    Sound Card
    Realtek
    Hard Drives
    3
    Cooling
    air
    Browser
    Edge
    Antivirus
    ESET
Yes , used the official Win11-ISO ( made by RUFUS-USB ) for upgrading from 24H2 to 25H2 , went fine ( only a lot of my setting and some software were lost ) , after installed connected to internet again and got some updates .
Then next updates ended with ; 0x800f0983 , had to repair with the same ISO , updated fine after repair .
Next update again same problem , same way of repair .
Then , latest November-update went fine without problems , no need to repair !
Seems this latest update fixed several install-problems ( 0x800f0983 )...................so finally everything seems to be OK ! :-)
The fix for (0x800f0983) according to the blog was included in Build 26200.7015 or above.
If you had any build below that when you tried the update it was still subject to that error. 😵‍💫🤷‍♂️

  • [Windows Update]
    • Improved: Addressed underlying issue which can cause “Update and shutdown” to not actually shut down your PC after updating.
    • Improved: Addressed underlying issue which can cause Windows Update to fail to install with error 0x800f0983.
 

My Computer

System One

  • OS
    Windows 11 Pro 25H2
    Computer type
    PC/Desktop
    Manufacturer/Model
    Dell XPS 8930
    CPU
    Intel I9-9900K
    Memory
    64GB
    Graphics Card(s)
    NVIDIA RTX 2060
    Sound Card
    NVIDIA High Definition Audio
    Monitor(s) Displays
    4k Samsung
    Screen Resolution
    3840 x 2160
    Hard Drives
    512GB NVMe, ADATA SU 800, 2TB HDD
The fix for (0x800f0983) according to the blog was included in Build 26200.7015 or above.
If you had any build below that when you tried the update it was still subject to that error. 😵‍💫🤷‍♂️

  • [Windows Update]
    • Improved: Addressed underlying issue which can cause “Update and shutdown” to not actually shut down your PC after updating.
    • Improved: Addressed underlying issue which can cause Windows Update to fail to install with error 0x800f0983.
Finally I know the cause of these update-pain , costed me a lot of time and some stress also ..........
Hopefully MS fixed it real good now , for future updates also ! 🛠️
 

My Computer

System One

  • OS
    Windows11 Pro 25H2
    Computer type
    PC/Desktop
    Manufacturer/Model
    Asus
    CPU
    i7
    Motherboard
    z97k
    Memory
    32GB
    Graphics Card(s)
    nVidia
    Sound Card
    Realtek
    Hard Drives
    3
    Cooling
    air
    Browser
    Edge
    Antivirus
    ESET
Finally I know the cause of these update-pain , costed me a lot of time and some stress also ..........
Hopefully MS fixed it real good now , for future updates also ! 🛠️
I'm sure they will add some new bug to keep us busy. 🤣🤣
 

My Computer

System One

  • OS
    Windows 11 Pro 25H2
    Computer type
    PC/Desktop
    Manufacturer/Model
    Dell XPS 8930
    CPU
    Intel I9-9900K
    Memory
    64GB
    Graphics Card(s)
    NVIDIA RTX 2060
    Sound Card
    NVIDIA High Definition Audio
    Monitor(s) Displays
    4k Samsung
    Screen Resolution
    3840 x 2160
    Hard Drives
    512GB NVMe, ADATA SU 800, 2TB HDD
Already pointed out to them; They are available to MVP's. (Microsoft Professionals) But still their are not official releases. They are not supposed to be published but I have seen loads of releases that they do. Stopped using them. And if you are using a release that's bugged. Nope. I have seen those appear arround every Build update. Once used them but they have a shelf life, As soon a new Build comes out you can kick out the previous one. And when you install the release; as soon as a new build comes along you have to undergo the update proces anyways.

There is no difference with the initial release (by using a In-Place-Instalment or a new install) and a later release. They both have to undergo the same update proces. The only difference is the build were they came from. It has no time-saving function. The time is the same; Start with 6584 or 6899 (or whatever) when triggered they both will download the latest 7171 (now) and spend the same amount of time updating your system.

Those ISO's are useful in cases you want to have a certain build and stay on it forever with all updates disabled. (You can reach the same with a backup of that system) Unlikely. Or If you have a pre-released version of it; for testing purposes on a VM.

(Would like to have a 26H2 MVS for Intel/AMD coming out in the fall of 2026... :eek1::LOL::LOL: In January the pre-release of 26H1 for ARM will come out... And MS sees that 24H2 and 25H2 are the same. I found that out also earlier. 25H2 is just a servicepack on top of 24H2. It's rigged as it would be a 26200 release but if you look at the Component Store; They are all 26100... But 26H2 should be a new one. We have to wait and see.....)
1763296527106.webp

I've been reading this message for two days and still understand 0% of it.
 

My Computers

System One System Two

  • OS
    Windows 11 Pro 25H2
    Computer type
    Laptop
    Manufacturer/Model
    Huawei MateBook D15
    CPU
    Ryzen 5 3500U
    Memory
    8GB
    Graphics Card(s)
    Vega 8
    Screen Resolution
    FHD
    Hard Drives
    256GB Samsung SSD + 1TB HDD
    Browser
    Microsoft Edge
    Antivirus
    ESET Smart Security Premium
  • Operating System
    Windows 10 Enterprise LTSC 21H2
    Computer type
    Laptop
    Manufacturer/Model
    MSI GS73 6RF Stealth Pro
    CPU
    intel core i7 6700HQ
    Memory
    16GB
    Graphics card(s)
    Nvidia Geforce GTX1060 (6GB)
    Screen Resolution
    FHD
    Hard Drives
    128GB SSD + 1TB HDD
    Browser
    Microsoft Edge
    Antivirus
    Windows Defender
Seems like this release is one those stable ones. Recommended for a clean-install.
 

My Computers

System One System Two

  • OS
    Windows 11 Pro 25H2
    Computer type
    Laptop
    Manufacturer/Model
    Huawei MateBook D15
    CPU
    Ryzen 5 3500U
    Memory
    8GB
    Graphics Card(s)
    Vega 8
    Screen Resolution
    FHD
    Hard Drives
    256GB Samsung SSD + 1TB HDD
    Browser
    Microsoft Edge
    Antivirus
    ESET Smart Security Premium
  • Operating System
    Windows 10 Enterprise LTSC 21H2
    Computer type
    Laptop
    Manufacturer/Model
    MSI GS73 6RF Stealth Pro
    CPU
    intel core i7 6700HQ
    Memory
    16GB
    Graphics card(s)
    Nvidia Geforce GTX1060 (6GB)
    Screen Resolution
    FHD
    Hard Drives
    128GB SSD + 1TB HDD
    Browser
    Microsoft Edge
    Antivirus
    Windows Defender
Cause it simplifies the Windows install process:

screenshot4_en.png
Why you got an old Rufus version? The new version now has option to make the media CA2023.
 

My Computers

System One System Two

  • OS
    Windows 11 Pro x64 24H2
    Computer type
    PC/Desktop
    CPU
    Ryzen 9 5900X
    Motherboard
    ASRock B550 PG Velocita (UEFI-BIOS 3.90)
    Memory
    64 GB G.Skill RipJaws V F4-3200C16D-64GVK
    Graphics Card(s)
    ASRock Steel Legend Arc B580 12 GB
    Monitor(s) Displays
    Alienware AW3423DWF OLED ultrawide
    Hard Drives
    Samsung 990 Pro 1 TB NVMe SSD
    PSU
    eVGA Supernova 750 G3
    Case
    Corsair 275R
    Internet Speed
    VTel FTTH 1 Gb down and 1 Gb up
  • Computer type
    PC/Desktop
    CPU
    Ryzen 7 5800X3D
    Motherboard
    Asus ROG Strix B550-F Gaming (UEFI-BIOS version 3607)
    Memory
    32 GB (2x16 GB G.Skill TridentZ Neo)
    Graphics card(s)
    Sapphire Nitro+ Radeon RX 6750 XT
    Hard Drives
    Samsung 970 Pro 512 GB NVMe SSD
    PSU
    Corsair RM850x
    Case
    Fractal Focus G
Only if you want to bypass the requirements, which I don't do.
Not just for that. You can now have it place UEFI boot loader that's signed with CA2023 key.
 

My Computers

System One System Two

  • OS
    Windows 11 Pro x64 24H2
    Computer type
    PC/Desktop
    CPU
    Ryzen 9 5900X
    Motherboard
    ASRock B550 PG Velocita (UEFI-BIOS 3.90)
    Memory
    64 GB G.Skill RipJaws V F4-3200C16D-64GVK
    Graphics Card(s)
    ASRock Steel Legend Arc B580 12 GB
    Monitor(s) Displays
    Alienware AW3423DWF OLED ultrawide
    Hard Drives
    Samsung 990 Pro 1 TB NVMe SSD
    PSU
    eVGA Supernova 750 G3
    Case
    Corsair 275R
    Internet Speed
    VTel FTTH 1 Gb down and 1 Gb up
  • Computer type
    PC/Desktop
    CPU
    Ryzen 7 5800X3D
    Motherboard
    Asus ROG Strix B550-F Gaming (UEFI-BIOS version 3607)
    Memory
    32 GB (2x16 GB G.Skill TridentZ Neo)
    Graphics card(s)
    Sapphire Nitro+ Radeon RX 6750 XT
    Hard Drives
    Samsung 970 Pro 512 GB NVMe SSD
    PSU
    Corsair RM850x
    Case
    Fractal Focus G

My Computers

System One System Two

  • OS
    Windows 11 Pro x64 24H2
    Computer type
    PC/Desktop
    CPU
    Ryzen 9 5900X
    Motherboard
    ASRock B550 PG Velocita (UEFI-BIOS 3.90)
    Memory
    64 GB G.Skill RipJaws V F4-3200C16D-64GVK
    Graphics Card(s)
    ASRock Steel Legend Arc B580 12 GB
    Monitor(s) Displays
    Alienware AW3423DWF OLED ultrawide
    Hard Drives
    Samsung 990 Pro 1 TB NVMe SSD
    PSU
    eVGA Supernova 750 G3
    Case
    Corsair 275R
    Internet Speed
    VTel FTTH 1 Gb down and 1 Gb up
  • Computer type
    PC/Desktop
    CPU
    Ryzen 7 5800X3D
    Motherboard
    Asus ROG Strix B550-F Gaming (UEFI-BIOS version 3607)
    Memory
    32 GB (2x16 GB G.Skill TridentZ Neo)
    Graphics card(s)
    Sapphire Nitro+ Radeon RX 6750 XT
    Hard Drives
    Samsung 970 Pro 512 GB NVMe SSD
    PSU
    Corsair RM850x
    Case
    Fractal Focus G
Why you got an old Rufus version? The new version now has option to make the media CA2023.
Explain please CA2023 .
I used version 4.11.2285 for upgrading from 24H2 to 25H2 .
What is CA2023 , do we need it...........?
 

My Computer

System One

  • OS
    Windows11 Pro 25H2
    Computer type
    PC/Desktop
    Manufacturer/Model
    Asus
    CPU
    i7
    Motherboard
    z97k
    Memory
    32GB
    Graphics Card(s)
    nVidia
    Sound Card
    Realtek
    Hard Drives
    3
    Cooling
    air
    Browser
    Edge
    Antivirus
    ESET
Explain please CA2023 .
I used version 4.11.2285 for upgrading from 24H2 to 25H2 .
What is CA2023 , do we need it...........?

This is because the UEFI Secure Boot key, CA2011 is going to expire in 2026.
 

My Computers

System One System Two

  • OS
    Windows 11 Pro x64 24H2
    Computer type
    PC/Desktop
    CPU
    Ryzen 9 5900X
    Motherboard
    ASRock B550 PG Velocita (UEFI-BIOS 3.90)
    Memory
    64 GB G.Skill RipJaws V F4-3200C16D-64GVK
    Graphics Card(s)
    ASRock Steel Legend Arc B580 12 GB
    Monitor(s) Displays
    Alienware AW3423DWF OLED ultrawide
    Hard Drives
    Samsung 990 Pro 1 TB NVMe SSD
    PSU
    eVGA Supernova 750 G3
    Case
    Corsair 275R
    Internet Speed
    VTel FTTH 1 Gb down and 1 Gb up
  • Computer type
    PC/Desktop
    CPU
    Ryzen 7 5800X3D
    Motherboard
    Asus ROG Strix B550-F Gaming (UEFI-BIOS version 3607)
    Memory
    32 GB (2x16 GB G.Skill TridentZ Neo)
    Graphics card(s)
    Sapphire Nitro+ Radeon RX 6750 XT
    Hard Drives
    Samsung 970 Pro 512 GB NVMe SSD
    PSU
    Corsair RM850x
    Case
    Fractal Focus G
Seems like this release is one those stable ones. Recommended for a clean-instalothing to buggrd
Seems like this release is one those stable ones. Recommended for a clean-install.
Maybe a stable Build release, but the next one? Can cry havoc again. The introduction of 25H2 didn't went smooth; 2 bugs beneath the Builds and with 25H2? Just a scam. Beneath it it it's till 24H2 under the hood... So who is kidding who? 26H2 is coming. A new Build. 2026... So....
 

My Computer

System One

  • OS
    Win 11 Pro "25H2" Build 26200.8524, Zorin OS Pro
    Computer type
    PC/Desktop
    Manufacturer/Model
    Self built
    CPU
    Intel® Core™ i7-12700KF 12th Gen.
    Motherboard
    ASUS Prime Z690-A, BIOS v4505
    Memory
    32GB DDR5 5600-36 Vengeance
    Graphics Card(s)
    PCIe4.0 Asus NVIDIA RTX3060Ti
    Sound Card
    Onboard; Realtek
    Monitor(s) Displays
    34" LG 34UC79G-B Curved 21:9 144Hz
    Screen Resolution
    2560x1080 (No HDR)
    Hard Drives
    250Gb Samsung 870PRO NVMe (Win 11 Pro)
    1Tb Samsung 980PRO NVMe
    1Tb Samsung 970EVO NVMe
    2Tb Samsung 990PRO NVMe with heatsink.
    4Tb WDC WD40EZRZ Blue SATA (Int.)
    4Tb WDC WD40EZRZ Blue SATA (Int.)
    3Tb WDC WD30EFRZ Red SATA (Int.)
    256Gb Samsung 840PRO SSD (RHEL 9,5)
    256Gb Samsung 850PRO SSD (Zorin OS Pro 18)
    PSU
    Coolermaster 850W V2 Gold with internal 12cm exaust fan
    Case
    Be-Quiet Pure Base 600.
    Cooling
    3x Be-Quiet! 12/14cm "Silent Wings 4" casefans, 1x Arctic Freezer i35 CPU towerblock with fan.
    Keyboard
    Steelseries APEX 7 keyboard.
    Mouse
    Logitech G-502 Hero
    Internet Speed
    1Gb
    Browser
    Brave
    Antivirus
    F-Secure
    Other Info
    No Noise system.
    256Gb Kingston Travler USB 3.0 drive.
    64Gb Sandisk USB 3.2 drive. (Ventoy)
    8Gb Philips USB 3.0 drive. (Win. Inst.)
    8Gb Philips USB 3.0 drive. (Rescue disk)
    2Tb WD USB 3.0 Passport drive.
    USB Ext. 500Gb WD SATA drive.
    External USB 3.0 C.A. CD/DVD* burner.
Why you got an old Rufus version? The new version now has option to make the media CA2023.
That's the default image linked from official Rufus page (it's just a showcase image - guess they haven't changed it to show their latest build).
 

My Computer

System One

  • OS
    WinDOS 25H2
    Computer type
    Laptop
    CPU
    Intel & AMD
    Memory
    SO-DIMM SK Hynix 15.8 GB Dual-Channel DDR4-2666 (2 x 8 GB) 1329MHz (19-19-19-43)
    Graphics Card(s)
    nVidia RTX 2060 6GB Mobile GPU (TU106M)
    Sound Card
    Onbord Realtek ALC1220
    Screen Resolution
    1920 x 1080
    Hard Drives
    1x Samsung PM981 NVMe PCIe M.2 512GB / 1x Seagate Expansion ST1000LM035 1TB
Explain please CA2023 .
I used version 4.11.2285 for upgrading from 24H2 to 25H2 .
What is CA2023 , do we need it...........?
It's not a show stopper, but I have a solution. I have seen some TPM errors inside my Windows log book

Level: Error
Time and date: 26-10-2025 18:14:44
Source: TPM-WMI
Occurrence-id: 01
Task description: None
Description:
Secure Boot CA/keys need to be updated. This device signature information is included here.

Pointing to TPM issues. I have to say; who have stopped using their system because of it?.... Nobody, Should be fixed by MS itself..... It seems to be an issue that lays underneath; Look at Registry key updates for Secure Boot: Windows devices with IT-managed updates - Microsoft Support
I have solved that issue by following these steps;

Its seems an issue that outdates CA2011 certification and replace it with CA2023. If you don't understand the whole issue? Never mind. MS stepped up their security a bit. Just as the rest of the world. Sad thing about this issue they could not resolve it with an simple update. It is just some entry inside your registry. and some files.
 
Last edited:

My Computer

System One

  • OS
    Win 11 Pro "25H2" Build 26200.8524, Zorin OS Pro
    Computer type
    PC/Desktop
    Manufacturer/Model
    Self built
    CPU
    Intel® Core™ i7-12700KF 12th Gen.
    Motherboard
    ASUS Prime Z690-A, BIOS v4505
    Memory
    32GB DDR5 5600-36 Vengeance
    Graphics Card(s)
    PCIe4.0 Asus NVIDIA RTX3060Ti
    Sound Card
    Onboard; Realtek
    Monitor(s) Displays
    34" LG 34UC79G-B Curved 21:9 144Hz
    Screen Resolution
    2560x1080 (No HDR)
    Hard Drives
    250Gb Samsung 870PRO NVMe (Win 11 Pro)
    1Tb Samsung 980PRO NVMe
    1Tb Samsung 970EVO NVMe
    2Tb Samsung 990PRO NVMe with heatsink.
    4Tb WDC WD40EZRZ Blue SATA (Int.)
    4Tb WDC WD40EZRZ Blue SATA (Int.)
    3Tb WDC WD30EFRZ Red SATA (Int.)
    256Gb Samsung 840PRO SSD (RHEL 9,5)
    256Gb Samsung 850PRO SSD (Zorin OS Pro 18)
    PSU
    Coolermaster 850W V2 Gold with internal 12cm exaust fan
    Case
    Be-Quiet Pure Base 600.
    Cooling
    3x Be-Quiet! 12/14cm "Silent Wings 4" casefans, 1x Arctic Freezer i35 CPU towerblock with fan.
    Keyboard
    Steelseries APEX 7 keyboard.
    Mouse
    Logitech G-502 Hero
    Internet Speed
    1Gb
    Browser
    Brave
    Antivirus
    F-Secure
    Other Info
    No Noise system.
    256Gb Kingston Travler USB 3.0 drive.
    64Gb Sandisk USB 3.2 drive. (Ventoy)
    8Gb Philips USB 3.0 drive. (Win. Inst.)
    8Gb Philips USB 3.0 drive. (Rescue disk)
    2Tb WD USB 3.0 Passport drive.
    USB Ext. 500Gb WD SATA drive.
    External USB 3.0 C.A. CD/DVD* burner.
It's not a show stopper, but I have a solution. I have seen some TPM errors inside my Windows log book

Level: Error
Time and date: 26-10-2025 18:14:44
Source: TPM-WMI
Occurrence-id: 01
Task description: None
Description:
Secure Boot CA/keys need to be updated. This device signature information is included here.

Pointing to TPM issues. I have to say; who have stopped using their system because of it?.... Nobody, Should be fixed by MS itself..... It seems to be an issue that lays underneath; Look at Registry key updates for Secure Boot: Windows devices with IT-managed updates - Microsoft Support
I have solved that issue by following these steps;

Its seems an issue that outdates CA2011 certification and replace it with CA2023. If you don't understand the whole issue? Never mind. MS stepped up their security a bit. Just as the rest of the world. Sad thing about this issue they could not resolve it with an simple update. It is just some entry inside your registry. and some files.
I noticed that all those error messages have this at the end:

Code:
HResult: The operation completed successfully.

(LOL)
 

My Computers

System One System Two

  • OS
    Windows 11 Pro x64 24H2
    Computer type
    PC/Desktop
    CPU
    Ryzen 9 5900X
    Motherboard
    ASRock B550 PG Velocita (UEFI-BIOS 3.90)
    Memory
    64 GB G.Skill RipJaws V F4-3200C16D-64GVK
    Graphics Card(s)
    ASRock Steel Legend Arc B580 12 GB
    Monitor(s) Displays
    Alienware AW3423DWF OLED ultrawide
    Hard Drives
    Samsung 990 Pro 1 TB NVMe SSD
    PSU
    eVGA Supernova 750 G3
    Case
    Corsair 275R
    Internet Speed
    VTel FTTH 1 Gb down and 1 Gb up
  • Computer type
    PC/Desktop
    CPU
    Ryzen 7 5800X3D
    Motherboard
    Asus ROG Strix B550-F Gaming (UEFI-BIOS version 3607)
    Memory
    32 GB (2x16 GB G.Skill TridentZ Neo)
    Graphics card(s)
    Sapphire Nitro+ Radeon RX 6750 XT
    Hard Drives
    Samsung 970 Pro 512 GB NVMe SSD
    PSU
    Corsair RM850x
    Case
    Fractal Focus G
I noticed that all those error messages have this at the end:

Code:
HResult: The operation completed successfully.

(LOL)
I still cannot understand how the UEFI CA 2023 update gets installed.
All the explanations I found on the web and tried to read just create even more confusion.

1) Who is supposed to do the update? Microsoft, the Computer vendor or both?
2) What exactly does a user need to do to avoid problems that will occur on and after June 2026?
3) What is the exact manual procedure to check and make sure the update is done?
 

My Computer

System One

  • OS
    Windows 11 Pro 25H2
    Computer type
    PC/Desktop
    Manufacturer/Model
    Dell XPS 8930
    CPU
    Intel I9-9900K
    Memory
    64GB
    Graphics Card(s)
    NVIDIA RTX 2060
    Sound Card
    NVIDIA High Definition Audio
    Monitor(s) Displays
    4k Samsung
    Screen Resolution
    3840 x 2160
    Hard Drives
    512GB NVMe, ADATA SU 800, 2TB HDD
have this at the end:

Code:
HResult: The operation completed successfully.

(LOL)
Hope that somethings are made clear *not an easy topic* It is a rock solid solution. Conformed by many people., You may laugh about it. So that makes you one person who has a problem with it....?? And?.... Hold the presses we have a major problem now.... :LOL:
 

My Computer

System One

  • OS
    Win 11 Pro "25H2" Build 26200.8524, Zorin OS Pro
    Computer type
    PC/Desktop
    Manufacturer/Model
    Self built
    CPU
    Intel® Core™ i7-12700KF 12th Gen.
    Motherboard
    ASUS Prime Z690-A, BIOS v4505
    Memory
    32GB DDR5 5600-36 Vengeance
    Graphics Card(s)
    PCIe4.0 Asus NVIDIA RTX3060Ti
    Sound Card
    Onboard; Realtek
    Monitor(s) Displays
    34" LG 34UC79G-B Curved 21:9 144Hz
    Screen Resolution
    2560x1080 (No HDR)
    Hard Drives
    250Gb Samsung 870PRO NVMe (Win 11 Pro)
    1Tb Samsung 980PRO NVMe
    1Tb Samsung 970EVO NVMe
    2Tb Samsung 990PRO NVMe with heatsink.
    4Tb WDC WD40EZRZ Blue SATA (Int.)
    4Tb WDC WD40EZRZ Blue SATA (Int.)
    3Tb WDC WD30EFRZ Red SATA (Int.)
    256Gb Samsung 840PRO SSD (RHEL 9,5)
    256Gb Samsung 850PRO SSD (Zorin OS Pro 18)
    PSU
    Coolermaster 850W V2 Gold with internal 12cm exaust fan
    Case
    Be-Quiet Pure Base 600.
    Cooling
    3x Be-Quiet! 12/14cm "Silent Wings 4" casefans, 1x Arctic Freezer i35 CPU towerblock with fan.
    Keyboard
    Steelseries APEX 7 keyboard.
    Mouse
    Logitech G-502 Hero
    Internet Speed
    1Gb
    Browser
    Brave
    Antivirus
    F-Secure
    Other Info
    No Noise system.
    256Gb Kingston Travler USB 3.0 drive.
    64Gb Sandisk USB 3.2 drive. (Ventoy)
    8Gb Philips USB 3.0 drive. (Win. Inst.)
    8Gb Philips USB 3.0 drive. (Rescue disk)
    2Tb WD USB 3.0 Passport drive.
    USB Ext. 500Gb WD SATA drive.
    External USB 3.0 C.A. CD/DVD* burner.
1) Who is supposed to do the update? Microsoft, the Computer vendor or both?
2) What exactly does a user need to do to avoid problems that will occur on and after June 2026?
3) What is the exact manual procedure to check and make sure the update is done?
I'm of the mindset, very few users will need to do anything. MS already announced they will be pushing updates. Also my last Dell BIOS update stated it included the UEFI CA 2023 updates. I believe a user here, Sheikh posted a bat file on how to check your machines versions and mine were good. In any event I'm not stressing about it, I see a lot of unnecessary panic over the whole issue.

 

My Computers

System One System Two

  • OS
    Windows 11 25H2
    Computer type
    Laptop
    Manufacturer/Model
    Alienware 18 Area-51
    CPU
    Intel Core Ultra 9 275HX (24-Core)
    Motherboard
    Alienware
    Memory
    64GB DDR5 6400MT/s
    Graphics Card(s)
    NVIDIA GeForce RTX 5080 and Intel UHD Graphics
    Sound Card
    Onboard, Realtek high-performance Audio chips (ALC3329 & ALC1708))
    Monitor(s) Displays
    300HZ 18-inch QHD 500 nit Comfort View+
    Screen Resolution
    2560 x 1600
    Hard Drives
    2TB NVMe M.2 PCIe Gen 5 SSD
    Case
    Magnesium Alloy
    Cooling
    Advanced Cryo-Tech Quad-Fan Cooling system & large vapor chamber
    Keyboard
    Cherry MX ultra low profile mechanical keyboard with per key AlienFX RGB lighting
    Mouse
    Logitech MX Master 4
    Browser
    Vivaldi (main), Firefox, Chrome, Edge
    Antivirus
    MS Defender and Malwarebytes Free
  • Operating System
    Windows 11 25H2
    Computer type
    Laptop
    Manufacturer/Model
    Microsoft Surface Laptop 7
    CPU
    Qualcomm Snapdragon X Elite (12 Core) ARM based CPU
    Motherboard
    Microsoft Corp.
    Memory
    16GB LPDDR5
    Graphics card(s)
    Qualcomm Adreno X1-85
    Sound Card
    Omnisonic speakers with Dolby Atmos spatial sound
    Monitor(s) Displays
    120 Hz 13.8-inch 600 nit PixelSense Flow touchscreen
    Screen Resolution
    2304x1536
    Hard Drives
    1TB NVMe Gen 4 SSD
    Case
    Anodized Aluminum
    Cooling
    Traditional active cooling fan system
    Keyboard
    Mechanical QWERTY, backlit when in use
    Mouse
    Logitech MX Master 4 and Surface Arc Mouse
    Browser
    Vivaldi (main), Firefox, Chrome, Edge
    Antivirus
    MS Defender and Malwarebytes Free
I still cannot understand how the UEFI CA 2023 update gets installed.
All the explanations I found on the web and tried to read just create even more confusion.

1) Who is supposed to do the update? Microsoft, the Computer vendor or both?
2) What exactly does a user need to do to avoid problems that will occur on and after June 2026?
3) What is the exact manual procedure to check and make sure the update is done?
Yes. I also question the "issue" also at first. You are right to question about it like WTF.

That CA2023 issue is a sign of the times. Security is beefing up for you and me, Company's They already implemented it but not in this manner. World became more dangerous also on security matters. *Daily break ins* MS is keeping track on it. I understand their position as a professional. I don't like how they misuse it sometimes like specs like Win10 is old. We have a new standard now Win 11 with increased security demands like no old CPU and a must have a TPM on board.. Besides the point. They said basically said goodbye to an older certificate than 2011 *They change things, but has a lot way to implant them.* I have seen a base certificate which expires in 2026. *Look at some MS drivers and it's certificate* Proof indeed. So MS also realized it and want to upgrade to 2023 in stead of 2011. That's is basically all the "fuzz" around it. Their certificate ends with 2026... Normal users can't be bother it. I can see it importance of it. They have to do something about it. We live in 2025 and it expiries in Oktober 2026. "We have to do something now to prevent...."

The way to do it... It's not that way. Could implement it by an update. But things are more complicated as it seems..... I have questions also. Your not the only one. And it seems like an non issue? Boy you wouldn't see security if it's counter part is starring in the face of you and later asking why I have been powend and my data is lying on the streets now...... (not taking about the big tech company's they know already all about us.) Don't like that? Pull the plug. So you are not connected with the internet. I am talking about basic things like security. Like if your not up to date; criminals can do everything. Like scamming you like getting your money for free because you fell into their trap...... 180 billions e-mails are send by them on a daily base...... A fact that you can search for....

I am the only one? NO!!!.....
 
Last edited:

My Computer

System One

  • OS
    Win 11 Pro "25H2" Build 26200.8524, Zorin OS Pro
    Computer type
    PC/Desktop
    Manufacturer/Model
    Self built
    CPU
    Intel® Core™ i7-12700KF 12th Gen.
    Motherboard
    ASUS Prime Z690-A, BIOS v4505
    Memory
    32GB DDR5 5600-36 Vengeance
    Graphics Card(s)
    PCIe4.0 Asus NVIDIA RTX3060Ti
    Sound Card
    Onboard; Realtek
    Monitor(s) Displays
    34" LG 34UC79G-B Curved 21:9 144Hz
    Screen Resolution
    2560x1080 (No HDR)
    Hard Drives
    250Gb Samsung 870PRO NVMe (Win 11 Pro)
    1Tb Samsung 980PRO NVMe
    1Tb Samsung 970EVO NVMe
    2Tb Samsung 990PRO NVMe with heatsink.
    4Tb WDC WD40EZRZ Blue SATA (Int.)
    4Tb WDC WD40EZRZ Blue SATA (Int.)
    3Tb WDC WD30EFRZ Red SATA (Int.)
    256Gb Samsung 840PRO SSD (RHEL 9,5)
    256Gb Samsung 850PRO SSD (Zorin OS Pro 18)
    PSU
    Coolermaster 850W V2 Gold with internal 12cm exaust fan
    Case
    Be-Quiet Pure Base 600.
    Cooling
    3x Be-Quiet! 12/14cm "Silent Wings 4" casefans, 1x Arctic Freezer i35 CPU towerblock with fan.
    Keyboard
    Steelseries APEX 7 keyboard.
    Mouse
    Logitech G-502 Hero
    Internet Speed
    1Gb
    Browser
    Brave
    Antivirus
    F-Secure
    Other Info
    No Noise system.
    256Gb Kingston Travler USB 3.0 drive.
    64Gb Sandisk USB 3.2 drive. (Ventoy)
    8Gb Philips USB 3.0 drive. (Win. Inst.)
    8Gb Philips USB 3.0 drive. (Rescue disk)
    2Tb WD USB 3.0 Passport drive.
    USB Ext. 500Gb WD SATA drive.
    External USB 3.0 C.A. CD/DVD* burner.
Back
Top Bottom