Microsoft Enhances Windows 11 with KB5074105 Update: Key Improvements and Critical Security Advisory
Microsoft has rolled out the optional non-security preview update KB5074105 for Windows 11 versions 25H2 and 24H2. This January 2026 C-week release focuses on enhancing functionality, optimizing performance, and improving system reliability, without addressing security vulnerabilities. As a cumulative update, it integrates previous fixes and introduces new changes to the operating system’s servicing stack and AI-driven components.
Critical Security Advisory: Upcoming Secure Boot Certificate Expiration
While KB5074105 is primarily a non-security update, it includes a crucial notification regarding the impending expiration of Windows Secure Boot certificates. These certificates, essential for verifying the integrity of the boot process, are set to expire starting in June 2026. Failure to update these certificates before the deadline may prevent devices from booting securely, posing significant operational risks for both personal and business users. Microsoft strongly recommends reviewing the guidance on Certificate Authority (CA) updates to prevent potential disruptions.
Simplified Update Nomenclature for Enhanced Clarity
To improve readability and streamline administrative processes, Microsoft has introduced a simplified title format for Windows updates beginning with this release. The new naming convention omits redundant technical details, such as platform architecture (e.g., x64-based systems), while retaining essential identifiers like the date prefix, KB number, and build version. This change aims to facilitate easier identification and management of updates in deployment tools like Windows Server Update Services (WSUS) and Microsoft Configuration Manager.
Advancements in AI Components
The KB5074105 update brings significant refinements to the AI models powering Copilot+ PC experiences and standard Windows 11 AI features. These enhancements are being rolled out in phases, so availability may vary initially before reaching general distribution. The updated AI component versions included in this release are as follows:
| AI Component | Version Identifier |
|——————–|——————–|
| Image Search | 1.2601.1268.0 |
| Content Extraction | 1.2601.1268.0 |
| Semantic Analysis | 1.2601.1268.0 |
| Settings Model | 1.2601.1268.0 |
Servicing Stack Update Integration
This cumulative update also includes the Servicing Stack Update (SSU) KB5074104, which updates the servicing stack version to 26100.7704. The SSU is crucial for the reliable installation of Windows updates, ensuring the update engine remains robust. Microsoft combines the latest SSU with the Latest Cumulative Update (LCU) to prevent version mismatches during deployment. As a result, users cannot uninstall the SSU portion of this package once applied.
Deployment and Installation Guidance
IT administrators can deploy this update via Windows Update for Business, the Microsoft Update Catalog, or WSUS. For those needing to remove the LCU portion of the package for troubleshooting purposes, the standard `wusa.exe /uninstall` command will not work due to the combined SSU payload. Instead, administrators should use the Deployment Image Servicing and Management (DISM) tool with the `/Remove-Package` option, specifying the exact LCU package name, which can be obtained by running `DISM /online /get-packages` in an elevated command prompt. Microsoft reports no known issues associated with this release.
Conclusion
The KB5074105 update for Windows 11 versions 25H2 and 24H2 introduces valuable enhancements to system functionality and AI capabilities. However, the critical advisory regarding the upcoming expiration of Secure Boot certificates underscores the importance of proactive security management. Users and administrators are urged to address this issue promptly to maintain secure and uninterrupted device operation.
