Secure Boot Archives

Winsage

July 30, 2026

Windows 11 KB5101684 update released with 42 changes and fixes

Microsoft has released the KB5101684 preview cumulative update for Windows 11 versions 24H2 and 25H2, which includes 42 bug fixes and various enhancements. This update is part of the optional non-security preview update schedule and does not include security updates. Users can install it via Settings > Windows Update > Check for Updates, with an option to choose installation. The update elevates Windows 11 24H2 to build 26100.8973 and Windows 11 25H2 to build 26200.8973. It addresses issues such as false invalid credential errors in File History backups, noncompliance in newly enrolled devices, and incorrect file markings on DFS mapped drives. New features include enhanced navigation in File Explorer, more accurate file size indicators, improved search results for app names, and new precision touchpad controls. Voice Isolation support for Voice Access is introduced, along with expanded Windows Hello Enhanced Sign-in Security for external fingerprint readers. Immediate features include enhancements to Secure Boot, app stability improvements, and fixes for MDM compliance issues. Additional features rolling out post-update involve better file size displays in File Explorer, enhanced app search, Voice Isolation for voice access, taskbar notification badge updates, new touchpad gesture controls, and reliability improvements for the Start menu and Windows sign-in screens. Microsoft reports no known issues with this update.

Winsage

July 30, 2026

ThinkPads from 2008 are some of the hottest used laptops right now — Here’s how (and why) they’re being turned into Windows 11 PCs

The ThinkPad X210Ai is a modified laptop that combines the chassis of older ThinkPad models (X200/X201) with a modern mainboard from TP Art, featuring Intel Core Ultra processors, DDR5 RAM support, dual M.2 SSD slots, Thunderbolt 4, and HDMI 2.1. The modification allows users to retain the original display and keyboard while requiring some chassis adjustments. TP Art offers a kit starting at 9, with complete builds beginning at 9, excluding RAM and storage. The popularity of the X210Ai has surged due to rising RAM prices and the demand for reliable, customizable machines. The modified board allows compatibility with Windows 11 and various Linux distributions. Processing times for orders can take up to six months, and cancellations are not allowed once placed.

Winsage

July 29, 2026

Windows 11’s optional July update speeds up the Start menu and taskbar

The optional update KB5101684 introduces updated Secure Boot certificates for a broader range of computers, enhancing system security. It is available for manual installation through the Microsoft Update Catalog and will be released to all users during the upcoming Patch Tuesday in August. After installation, Windows 11 25H2 will have a build number of 26200.8973, and Windows 11 24H2 will have a build number of 26100.8973.

Winsage

July 29, 2026

Missed Windows 11 Secure Boot? Don’t panic, Microsoft is still pushing it in the coming months

Microsoft reassured Windows 11 and Windows 10 users that their PCs will continue to boot normally and receive updates even if they have not yet received the new Secure Boot 2023 certificates. The rollout of these certificates is expected to continue over the upcoming months. The initial Secure Boot certificate expired on June 24, 2026, and Microsoft has been replacing older 2011 certificates since 2024. The latest update, KB5101650, transitioned Windows 11 to OS builds 26200.8875 and 26100.8875 for versions 25H2 and 24H2, respectively. The 2023 certificates replace older certificates with modern cryptographic standards, allowing Microsoft to deliver DBX revocation updates without interruption. Devices using the 2011 KEK can only receive DBX updates signed with that key, which is no longer valid after June 24. Microsoft has been rolling out the 2023 certificates for the past two years, and many devices remained in a yellow or red status by the June deadline. To check Secure Boot status, users can navigate to Windows Security > Device Security. A green checkmark indicates successful application of the certificates, while yellow and red alerts indicate compatibility issues or firmware incompatibility. PCs that are older or operating in Legacy BIOS mode will not receive the updates. Windows 10 also receives Secure Boot updates, but enrollment in Extended Security Updates (ESU) is required.

Winsage

July 21, 2026

Microsoft Releases New Windows 11 Security Update Fix For Dell Users

On July 21, Microsoft announced an emergency security update, KB5121767, for Windows 11 versions 25H2 and 24H2, due to complications from the July Patch Tuesday update, KB5101650, which caused performance issues for certain Dell users, including unexpected system shutdowns. The problem was linked to a conflict between the Windows USB-C Connection Manager interface and the Intel Innovation Platform Framework Processor Participant driver. Affected Dell models include the Dell Pro Max 14 Premium MA14250, Dell Pro Max 16 Premium MA16250, Dell XPS 17 9720, and Dell XPS 17 9730. Microsoft recommends that only users of these impacted devices install the update, while assuring unaffected users that no action is necessary. Additionally, Microsoft acknowledged issues affecting Windows Server Update Services that hinder Windows Update scans, stemming from a buildup of publishing metadata, and has implemented a service-side mitigation to address this.

Winsage

July 21, 2026

Microsoft Releases New Windows 11 Security Update Fix For Dell Users

Microsoft has released an emergency out-of-band security update (KB5121767) for Windows 11 versions 25H2 and 24H2 due to performance issues caused by the July Patch Tuesday update (KB5101650) affecting certain Dell devices. The issues include system shutdowns, stemming from a conflict between the Windows USB-C Connection Manager and the Intel Innovation Platform Framework Processor Participant driver. Confirmed affected Dell models include the Dell Pro Max 14 Premium MA14250, Dell Pro Max 16 Premium MA16250, Dell XPS 17 9720, and Dell XPS 17 9730. The update is specifically for users of these devices experiencing performance-related issues, and Microsoft stated that no action is required for unaffected devices.

Winsage

July 20, 2026

Enable BitLocker on Windows 11: 11 Steps, 45 Min [2026]

A stolen laptop can lead to a significant data breach, particularly when taken from public places. Windows 11 has introduced BitLocker, a full-disk encryption feature that became mandatory for Australian businesses in 2026. The Office of the Australian Information Commissioner reported 766 notifiable data breaches in the latter half of 2024, with unauthorized access to devices being a major cause. Full-disk encryption is crucial for compliance with the Essential Eight framework, which mandates data protection on portable devices. BitLocker ensures that data on an encrypted drive becomes unreadable if the drive is removed and connected to another computer. It aligns with the Essential Eight framework, requiring evidence of encryption rather than just claims of protection. There are three types of encryption on Windows 11: Device Encryption, BitLocker Drive Encryption, and File-Level Encryption. BitLocker is available only on Windows 11 Pro and higher editions. To use BitLocker, certain prerequisites must be met, including having Windows 11 Pro or higher, a Trusted Platform Module (TPM) 2.0, UEFI firmware with Secure Boot enabled, and local administrator rights. The process to enable BitLocker involves confirming the edition, checking TPM status, enabling BitLocker through Windows Settings or PowerShell, and backing up the recovery key. Organizations can deploy BitLocker fleet-wide using Microsoft Intune, and additional security measures like TPM+PIN can be implemented for pre-boot authentication. Common pitfalls during BitLocker rollout include skipping recovery key backup and assuming that Home edition machines are covered. Troubleshooting common BitLocker issues involves identifying symptoms and applying appropriate fixes. Advanced tips for enhancing security include suspending BitLocker before maintenance and auditing compliance at the fleet level. BitLocker is integral to protecting data on portable devices, and compliance documentation is essential for proving that every device has an active recovery key.

Winsage

July 20, 2026

Windows 11’s biggest updates may need multiple reboots, but that’s normal, don’t force shutdown

Users may experience double reboots when installing substantial Windows updates, such as the April and July 2026 Updates, due to factors like Secure Boot and .NET Framework updates. The July 2026 .NET Framework update specifically requires a separate reboot. Microsoft is still rolling out the Secure Boot 2023 certificate update, which may also lead to multiple reboots. Users are advised not to panic during these reboots and to allow the system time to complete the installation process. Additionally, Microsoft has warned against delaying updates for more than three days due to increasing update sizes related to security vulnerabilities. Some users may encounter SCEP certificate errors in the Event Viewer after the July 2026 Update, but these errors do not indicate a failure of the update process.

Winsage

July 20, 2026

Windows 11 Version 26H2 Ships as an Enablement Package With No New Features Over 25H2

Microsoft is set to release Windows 11 version 26H2, an enablement package based on version 25H2, without introducing new features at launch. The update will require only a single restart for devices on versions 25H2 or 24H2, while users on older versions, such as 23H2 or Windows 10, will need a full feature update. Both versions share identical features and are built on the same platform, with version 26H2 using build numbers in the 26300 series. The update process will vary depending on the current version, and version 26H2 will not change hardware requirements. Microsoft plans a gradual rollout of the update, initially as an optional install. Version 26H2 aims to extend support, adding approximately a year to the support timeline, with version 25H2 support continuing until October 2027. Users should verify their current version and back up important files before upgrading.

Winsage

July 20, 2026

July 2026 Patch Tuesday: KB5101650 Windows 11 Update

On July 14, 2026, Microsoft released cumulative update KB5101650 for Windows 11 versions 25H2 and 24H2, addressing OS Builds 26200.8875 and 26100.8875. This update includes essential security fixes, updates to Secure Boot certificates, and enhanced Remote Desktop Protocol (RDP) defenses against phishing attacks. It consolidates July 2026's security content, addressing known vulnerabilities and introducing functional improvements. The update is critical for minimizing exposure to identified threats and is prioritized for systems managing remote access or nearing certificate expiration. The update enhances Remote Desktop security by supporting SHA-2 certificate thumbprints while retaining SHA-1 for legacy compatibility. It includes new Group Policy options to mitigate phishing risks associated with malicious .rdp files. The curl upgrade to version 8.21.0 incorporates security patches for command-line tools in Windows environments. Secure Boot certificates are automatically updated through Windows updates, ensuring boot security across various hardware. KB5101650 installs primarily through the Windows Update interface, requiring a restart to activate changes. Enterprise environments can use the Microsoft Update Catalog for manual distribution. A temporary restriction affects certain Dell devices with Intel Innovation Platform Framework drivers, which Microsoft plans to address in a future update. The cumulative update resolves a total of 622 Microsoft CVEs, including 416 affecting Windows components. Users are advised to verify and install the update promptly to secure the full suite of improvements.