Forum Discussion
Windows Boot Manager not updated
KB5025885 outlines how to update Windows Boot Manager, but build 26257 still has a Windows Boot Manager that is signed with the old "PCA 2011" certificate. The manual processes in KB5025885 are a...
Second this. My hope and humble expectation is that an in-place upgrade to build 26100 will care to fix the certificate for secure boot and also closing the WinRE security issue by a suitable resized and recreated WinRE Partition when upgrading WS 2012 R2 through 2022 to WS 2022.
Is this something you would like to consider with a dynamic update for setup?
Completely agree with this suggestion. Our Org will be upgrading to Win 11 24H2 anyway so would save us a lot of time if we could avoid the manual process for patching KB5025885.