Windows 11 KB5089573 Preview Adds Performance Improvements and Secure Boot Certificate Rollout

· Original article ↗

Summary

Microsoft’s optional KB5089573 preview for Windows 11 25H2 and 24H2 includes performance and reliability changes, Windows Hello refinements, and expanded phased delivery of replacement Secure Boot certificates; it contains no security updates.

Key points

  • KB5089573 is an optional, non-security preview update for Windows 11 25H2 and 24H2.
  • Microsoft says it speeds app launches and core experiences including Start, Search, and Action Center.
  • Windows Hello sign-in behavior is refined for face, fingerprint, and PIN authentication.
  • The update includes shared audio and battery, sensor, HID, and Modern Standby improvements.
  • Additional device-targeting data is intended to expand eligibility for automatic Secure Boot certificate updates, with rollout conditioned on successful update signals.
  • The replacement certificates are for the original 2011 certificates, which Microsoft says expire in late June.

Article Details

Event Type
Microsoft released the optional KB5089573 non-security preview cumulative update for Windows 11 versions 25H2 and 24H2.
Impact
The update includes performance and reliability improvements, changes to Windows Hello sign-in behavior, shared audio, improved battery and sensor behavior, and a phased rollout of updated Secure Boot certificates. It does not include security updates. Separately, Microsoft reported domain controller lookup failures on Windows Server 2016 after installation of the KB5087537 May 2026 security update.

Vendors

Products

Related Articles