Windows 11 25H2/24H2 Preview Updates Add AI Features and Flag Secure Boot Certificate Expiration

Microsoft began rolling out Windows 11 preview updates for versions 25H2 and 24H2 (including the optional non-security preview update KB5074105 and Release Preview builds 26200.7701/26100.7701) focused on functionality, performance, and reliability improvements rather than patching new security vulnerabilities. The updates emphasize expanded AI-driven experiences (including refinements to Copilot+ PC-related models and more natural-language assistance within Settings), along with usability changes and a simplified Windows update title format intended to reduce administrative friction in tools like WSUS and Microsoft Configuration Manager.

Alongside these feature updates, Microsoft highlighted an operational security risk: Windows Secure Boot certificates used by most Windows devices are expected to begin expiring in June 2026, and organizations that do not update Certificate Authority (CA) material in time may face devices that cannot boot securely. Separately, consumer guidance circulated on bypassing Windows 11 hardware eligibility checks (notably TPM 2.0 requirements) to upgrade “unsupported” PCs; while this may extend device usability after Windows 10 support ended, it can also undermine Microsoft’s intended security baseline and increase enterprise risk if adopted outside controlled policy.