Win Update KB5121003 Windows 11 Cumulative Update build 26100.9168 (24H2) and 26200.9168 (25H2) - Aug. 11



 Microsoft Support:

Announcements and messages

This section provides key notifications related to this release, including announcements, change logs, and end-of-support notices.

Windows Secure Boot certificate expiration
Important

Secure Boot certificates used by most Windows devices were set to expire starting in June 2026. Microsoft has been updating these certificates on PCs and non-managed business devices for the past months. Devices that haven’t received the newer certificates will continue to start, and standard Windows updates will continue to install. We will continue to install the newer certificates via Windows updates in the coming months.

End of updates
Windows 11, version 24H2 Home and Pro editions will reach end of updates on October 13, 2026. Devices running these editions will no longer receive fixes for known issues, time zone updates, technical support, or monthly security and preview updates containing protections from the latest security threats. Enterprise and Education editions remain supported until October 12, 2027.

To stay protected and up to date, we recommend you upgrade to the latest version of Windows 11.


Change log

Change date
Change description
August 20, 2026Added a known issue, "Reports of certain games becoming unresponsive".
August 17, 2026Update added, "[Sharing] This update removes the Drop Tray experience (previously named Drag Tray) for devices where it was available. It also removes the associated setting under Settings > System > Multitasking. We are continuing to evaluate the experience and explore future enhancements."


Improvements

This update includes improvements from the following previously released updates:
The following summary outlines key quality improvements addressed by this update. The bold text within the brackets indicates the item or area of the change.
  • [Security updates] This update provides security improvements. For more information about the security vulnerabilities resolved by this update, see the Security Update Guide
  • [Secure Boot] This update includes additional high confidence device targeting data, increasing coverage of devices eligible to automatically receive new Secure Boot certificates. Certificate deployment via Windows updates continues across supported PCs and non-managed business devices in the coming months.
  • [Sharing] This update removes the Drop Tray experience (previously named Drag Tray) for devices where it was available. It also removes the associated setting under Settings > System > Multitasking. We are continuing to evaluate the experience and explore future enhancements.

If you've already installed previous updates, your device will download and install only the new updates included in this package.

Components updates

AI components
This release updates the following AI components to version 1.2605.856.0: Image Search, Content Extraction, Semantic Analysis, and Settings Model. To learn more, see Release information for AI components.

Servicing stack update
Includes KB5123304 (Build 26100.9156), which improves the reliability of the Windows update installation process. To learn more about SSUs, see Simplifying on-premises deployment of servicing stack updates.

Known issues in this update

Symptoms

Microsoft received reports of issues involving inability to run certain games as expected after installing this update.

Ongoing investigation indicates that this issue is associated with certain peripherals or internal device components that support RGB lighting features. These devices might install drivers or software components with file names similar to inpoutx64. On systems where these drivers are found, launching certain games can trigger this issue.

Games identified in reports of this issue include ARC Raiders, MARVEL Tōkon: Fighting Souls, and THE FINALS. Reported symptoms include:
  • the game application becomes unresponsive
  • the game application closes without notice
  • the error "EXCEPTION_ACCESS_VIOLATION" is displayed
  • the device restarts without warning
If you are experiencing this issue or a similar issue, please use Feedback Hub to submit a report. You can open Feedback Hub by pressing the Windows logo key + F. For additional information, see Send feedback to Microsoft with the Feedback Hub app. Your reports are helpful to our investigation.

Next steps

Microsoft is investigating the interaction between these RGB-related components and the affected games. Additional details will be provided as they become available.

How to get this update

Before you install this update

Microsoft combines the latest servicing stack update (SSU) for your operating system with the latest cumulative update (LCU). For general information about SSUs, see Servicing stack updates.

Deployment​

If you deploy dynamic updates such as this update to an existing Windows image, ensure the boot.stl file is included as part of the installation media. Failure to include the file might prevent devices from successfully starting from the installation media and can result in error code 0xc0430001.

Note
The boot.stl file is used during Secure Boot validation and must match the Windows version and architecture of the image you are updating.

To ensure the boot.stl file is included as part of the installation media, do one of the following:
  • Use the Update WinPE script to update an existing Windows image. (Recommended)
  • Manually copy the boot.stl file from the device Windows\Boot\EFI folder to the corresponding folder on your installation media before deploying the update.
For information about how to apply Dynamic Update packages to existing Windows images, see Update Windows installation media with Dynamic Update.

Install this update​

To install this update, use one of the following Windows and Microsoft release channels.

Available​
Next Step​
✅This update downloads and installs automatically from Windows Update and Microsoft Update.
✅To install this release from the Microsoft Update Catalog, select the option that matches your device architecture (arm64 or x64), and then follow the instructions.

File information

For a list of the files provided in this update, download the file information for cumulative update KB5121003.

For a list of the files provided in the servicing stack update, download the file information for the SSU (KB5123304) - version 26100.9156.


 Source:



Check Windows Updates


ISO from Microsoft MCT:



UUP Dump:

64-bit ISO download:

ARM64 ISO download:

 
Last edited:
OK, update. This build does mess-up Snagit. I rolled back to 9168 and the problem is gone.
Back to 9168? 🤔 AFAIK, that is the current build.
 

My Computers My Computers

  • At a glance

    Win 11 Pro 25H2, Build 26200.9168Intel Core i5 14500, 14th Generation64GB DDR4GeForce RTX 4060
    OS
    Win 11 Pro 25H2, Build 26200.9168
    Computer type
    PC/Desktop
    Manufacturer/Model
    Home Brew
    CPU
    Intel Core i5 14500, 14th Generation
    Motherboard
    Gigabyte B760M G P WIFI
    Memory
    64GB DDR4
    Graphics Card(s)
    GeForce RTX 4060
    Sound Card
    Chipset Realtek
    Monitor(s) Displays
    LG 45" Ultragear & Acer 24" 1080p
    Screen Resolution
    5120x1440 & 1920x1080
    Hard Drives
    Crucial P310 2TB 2280 PCIe Gen4 3D NAND NVMe M.2 SSD (O/S)
    Silicon Power 2TB US75 NVMe PCIe Gen4 M.2 2280 SSD (backup)
    Crucial BX500 2TB 3D NAND (2nd backup)
    Seagate 4TB Ironwolf, rotating HDD archive files
    External off-line backup Drives: 2 NVMe 4TB drives in external enclosures
    PSU
    Thermaltake Toughpower GF3 750W
    Case
    LIAN LI LANCOOL 216 E-ATX PC Case
    Cooling
    Lots of fans!
    Keyboard
    Microsoft Comfort Curve 2000
    Mouse
    Logitech G305
    Internet Speed
    Verizon FiOS 1GB
    Browser
    Firefox
    Antivirus
    Malware Bytes & Windows Defender Security
  • At a glance

    Win 11 Pro 25H2, Build 26200.9168Intel Core i5 1440032GB DDR5Intel 700 Embedded GPU
    Operating System
    Win 11 Pro 25H2, Build 26200.9168
    Computer type
    PC/Desktop
    Manufacturer/Model
    Home Brew
    CPU
    Intel Core i5 14400
    Motherboard
    Gigabyte B760M DS3H AX
    Memory
    32GB DDR5
    Graphics card(s)
    Intel 700 Embedded GPU
    Sound Card
    Realtek Embedded
    Monitor(s) Displays
    27" HP 1080p
    Screen Resolution
    1920x1080
    Hard Drives
    Crucial P310 2TB 2280 PCIe Gen4 eD NAND PCIe SSD
    Samsung EVO 990 2TB NVMe Gen4 SSD
    Samsung 2TB SATA SSD
    PSU
    Thermaltake Smart BM3 650W
    Case
    Okinos Micro ATX Case
    Cooling
    Fans
    Keyboard
    Microsoft Comfort Curve 2000
    Mouse
    Logitech G305
    Internet Speed
    Verizon FiOS 1GB
    Browser
    Firefox
    Antivirus
    Malware Bytes & Windows Defender Security
  • Nimo N171 17" Laptop, (Intel i3-1215U, 16GB RAM, 2TB NVMe, Win11 Pro)
    Acemagic Vista Mini PC V1 (Intel N150, 16GB RAM, 1TB NVMe, Win11 Pro)
    HP ENVY h8-1540t, (24GB RAM, 2TB SSD, 2TB HDD, Win11 Pro)
Back to 9168? 🤔 AFAIK, that is the current build.
You're so right. I kept thinking myself I was on 9168. The problem is 9267. Sorry for confusing ya'll. :eyeroll: Snagit works fine on 9168
 

My Computer My Computer

At a glance

Windows 11 EducationIntel® Core™ i9-13900K Desktop Processor 16 (...G.Skill Ripjaws V Series 32gb (2x16gb) DDR4 3...Asus Dual Geforce Rtx™ 3060 TI Edition 8gb Gddr6
OS
Windows 11 Education
Computer type
PC/Desktop
CPU
Intel® Core™ i9-13900K Desktop Processor 16 (8P+8E)
Motherboard
Asus TUF Gaming Z790-PLUS WIFI D4
Memory
G.Skill Ripjaws V Series 32gb (2x16gb) DDR4 3600mhz
Graphics Card(s)
Asus Dual Geforce Rtx™ 3060 TI Edition 8gb Gddr6
Monitor(s) Displays
BenQ EW3270U 31.5” 3840x2160 UHD 16:9 HDR LED 4K LG 27UK850-W 27'' 4K UHD IPS LED Monitor with HDR10
Screen Resolution
3840x2160
Hard Drives
Samsung 990 with heatsink PRO PCIe 4.0 Gen 4 NVMe® SSD 1TB
WD_BLACK SN850X NVMe M.2 2280 1TB PCI-Express 4.0
Crucial T500 2TB Gen4
Samsung 970 Evo M.2 2280 2tb Pcie Gen3. X4
PSU
Corsair AXi Series AX860i Digital 860W 80 PLUS PSU
Case
Fractal Meshify C ATX Mid Tower Case
Keyboard
Logi MX Keys
Mouse
Logi M705
Internet Speed
400 mbs
Browser
Firefox
Antivirus
Eset NOD32
Other Info
Love fast boots
July Preview/August 2026 rolled out a workaround to some AIK v2 reporting errors, but it doesn't fix all of them because it depends on your TPM's HW features. If you have an older TPM chip, this error might not ever go away.

What happens is shortly after boot, Windows tries to read the TPM attestation details and finds out you don't have a fully compliant TPM under the new security rules. So your PC tries to reach out to a MS server to reconfirm the current security keys, and that request fails since your TPM doesn't meet the requirements.

I have an AMD Ryzen 7 9800X3D and an MSI MAG X870E Tomahawk WiFi, so this chip and motherboard are pretty new. I don’t know why there could be a problem with my TPM. Have the workarounds already been rolled out, or will they be released with the August preview update next week?
 

My Computer My Computer

At a glance

Windows 11 Pro
OS
Windows 11 Pro
Computer type
PC/Desktop
The workarounds are in the August update. But they don't cover all HW versions of TPM, some will continue to throw warnings.

You can continue to hope for a fix. Has anyone actually tried the ViveTool suggestion, and it didn't work for them? It doesn't change TPM security, just how Windows approaches auditing the TPM settings.
 

My Computer My Computer

At a glance

Windows 7
OS
Windows 7

My Computers My Computers

  • At a glance

    Windows 11 Pro for WorkstationsIntel i7-8700K 5 GHz64 GB (4x16GB) G.SKILL TridentZ RGB DDR4 3600...ASUS ROG-STRIX-GTX1080TI-O11G-GAMING (11GB GD...
    OS
    Windows 11 Pro for Workstations
    Computer type
    PC/Desktop
    Manufacturer/Model
    Custom self build
    CPU
    Intel i7-8700K 5 GHz
    Motherboard
    ASUS ROG Maximus XI Formula Z390
    Memory
    64 GB (4x16GB) G.SKILL TridentZ RGB DDR4 3600 MHz (F4-3600C18D-32GTZR)
    Graphics Card(s)
    ASUS ROG-STRIX-GTX1080TI-O11G-GAMING (11GB GDDR5X)
    Sound Card
    Integrated Digital Audio (S/PDIF)
    Monitor(s) Displays
    2 x Samsung Odyssey G75 27"
    Screen Resolution
    2560x1440
    Hard Drives
    1TB Samsung 990 PRO M.2,
    4TB Samsung 990 PRO M.2,
    TerraMaster F8 SSD Plus NAS
    PSU
    Seasonic Prime Titanium 850W
    Case
    Thermaltake Core P3 wall mounted
    Cooling
    Corsair Hydro H115i
    Keyboard
    Amazon Basics Wired Full Keyboard MD005
    Mouse
    Logitech MX Master 4
    Internet Speed
    2 Gbps Download and 100 Mbps Upload
    Browser
    Chrome and Edge
    Antivirus
    Microsoft Defender
    Other Info
    Logitech Z625 speaker system,
    Logitech BRIO 4K Pro webcam,
    HP Color LaserJet Pro MFP M477fdn,
    CyberPower CP1500PFCLCD
    Galaxy S23 Plus phone
  • At a glance

    Windows 11 ProSnapdragon X Elite (12 core) 3.42 GHz16 GB LPDDR5x-7467 MHz
    Operating System
    Windows 11 Pro
    Computer type
    Laptop
    Manufacturer/Model
    Surface Laptop 7 Copilot+ PC
    CPU
    Snapdragon X Elite (12 core) 3.42 GHz
    Memory
    16 GB LPDDR5x-7467 MHz
    Monitor(s) Displays
    15" HDR
    Screen Resolution
    2496 x 1664
    Hard Drives
    1 TB SSD
    Internet Speed
    Wi-Fi 7 and Bluetooth 5.4
    Browser
    Chrome and Edge
    Antivirus
    Microsoft Defender
The workarounds are in the August update. But they don't cover all HW versions of TPM, some will continue to throw warnings.

You can continue to hope for a fix. Has anyone actually tried the ViveTool suggestion, and it didn't work for them? It doesn't change TPM security, just how Windows approaches auditing the TPM settings.
Yes, I tried the vivetool hack. It worked. My computer successfully reverted to AIK v. 1. Thanks!
 

My Computer My Computer

At a glance

Windows 11 ProIntel i9-13900KF32 GB Corsair Vengeance DDR5-6000 MHzASUS Dual GeForce RTX 4070
OS
Windows 11 Pro
Computer type
PC/Desktop
Manufacturer/Model
iBUYPOWER
CPU
Intel i9-13900KF
Motherboard
ASUS ROG Maximus Z790 Hero
Memory
32 GB Corsair Vengeance DDR5-6000 MHz
Graphics Card(s)
ASUS Dual GeForce RTX 4070
Sound Card
none
Monitor(s) Displays
Dell U2412M
Screen Resolution
1920 x 1200
Hard Drives
WD Black SN850X NVMe SSD - 1 TB
PSU
Thermaltake Toughpower GF3 1000W
Case
Fractal Design Meshify 2 RGB
Cooling
Corsair H150i RGB Elite
Keyboard
Deck Hassium Pro
Mouse
Logitech MX Master 4
Internet Speed
1500 Mbps download, 40 Mbps upload
Browser
Firefox
Antivirus
Bitdefender Internet Security
Any update about this? Should i be worried? I got this error on 26h1.
 

My Computer My Computer

At a glance

Windows 11
OS
Windows 11
Computer type
PC/Desktop
Manufacturer/Model
Asrock b760 pro rs
There's no real need for concern. This summer, Windows changed their method for evaluating your TPM's security. TPM's that don't meet the newer standard will throw an error, which is expected. It's actually a warning, but everything in the TPM category is always logged as an "error".

If you use the ViveTool command, it returns Windows to the previous measurement method.
 

My Computer My Computer

At a glance

Windows 7
OS
Windows 7
There's no real need for concern. This summer, Windows changed their method for evaluating your TPM's security. TPM's that don't meet the newer standard will throw an error, which is expected. It's actually a warning, but everything in the TPM category is always logged as an "error".

If you use the ViveTool command, it returns Windows to the previous measurement method.
Ok, so which CPU's have this newer version of TPM?
 

My Computers My Computers

  • At a glance

    Windows 11 25H2Intel i9 14900KF64GB Corsair Vengeance RGBMSI 4090 Suprim X
    OS
    Windows 11 25H2
    Computer type
    PC/Desktop
    Manufacturer/Model
    Custom Built
    CPU
    Intel i9 14900KF
    Motherboard
    ASUS Z790 ProArt Creator WiFi
    Memory
    64GB Corsair Vengeance RGB
    Graphics Card(s)
    MSI 4090 Suprim X
    Sound Card
    Onboard
    Monitor(s) Displays
    1 x Asus 24". 1 x Asus 32"
    Screen Resolution
    1920 x 1080 & 2560 x 1440
    Hard Drives
    Multiple
    PSU
    Corsair 1200HX
    Case
    Corsair 7000D RGB
    Cooling
    Corsair H150I Capellix XT
    Keyboard
    Corsair K70 RGB PRO
    Mouse
    Corsair M55 RGB Pro
    Internet Speed
    1000Mbps
    Browser
    Edge
    Antivirus
    Windows Default
  • At a glance

    Windows 11 25H2Intel i7 6800K32GB DDR4 (Corsair)ASUS GTX 1080ti
    Operating System
    Windows 11 25H2
    Computer type
    PC/Desktop
    Manufacturer/Model
    Custom Built
    CPU
    Intel i7 6800K
    Motherboard
    ASUS Z99 Deluxe
    Memory
    32GB DDR4 (Corsair)
    Graphics card(s)
    ASUS GTX 1080ti
    Sound Card
    Onboard
    Monitor(s) Displays
    1x Viewsonic 24" 1x LG 19"
    Screen Resolution
    1920 x 1080 & 1600 x 900
    Hard Drives
    3 x SATA SSD
    PSU
    650W Gigabyte Bronze
    Case
    Coolermaster HAF-X
    Cooling
    Noctua NH-15 Chroma black
    Keyboard
    Generic RGB
    Mouse
    Microsoft Basic
    Internet Speed
    1000Mbps
    Browser
    Edge
    Antivirus
    Windows Default
I don't think there's a list of CPU or discrete TPM models that will create Event 87 SCEP errors.
 

My Computer My Computer

At a glance

Windows 7
OS
Windows 7

Latest Support Threads

Back
Top Bottom