Event details
Will Windows 11 (24H2/25H2) devices that are hotpatch enabled also get Secure Boot updates?
I’m wondering because the normal (with reboot) LCU for February notes Secure boot under Improvement. But no such information for the hotpatch variant for February.
https://support.microsoft.com/en-us/topic/february-10-2026-kb5077181-os-builds-26200-7840-and-26100-7840-f0fa9e54-a22a-4a06-96b6-bf5b2aded506
https://support.microsoft.com/en-us/topic/february-10-2026-hotpatch-kb5077212-os-builds-26200-7781-and-26100-7781-722c74c5-ea30-4622-8436-6b8dcb975b2b
- Arden_White
Microsoft
Hi Joaki1810,
Hotpatch updates are security‑only updates. The OS support required for Secure Boot certificate updates was delivered in prior monthly cumulative updates, including those released before the January hotpatch baseline.As a result, hotpatch‑enabled Windows 11 24H2 and 25H2 devices can still receive Secure Boot certificate updates. In most cases, these certificate updates can be applied without a reboot. Some Secure Boot changes do require a restart, such as applying a newly signed Windows Boot Manager, and those changes are applied during the baseline month when a reboot occurs.
For devices relying on hotpatch, High Confidence targeting data is only updated during baseline months. When that High Confidence data is refreshed, hotpatch‑enabled devices that meet the criteria will have their Secure Boot certificates updated at that time.
This is why Secure Boot improvements may be called out in the standard February cumulative update but not explicitly listed in the February hotpatch update.
Arden
