Microsoft has released the much-anticipated Windows 11 August 2025 Patch Tuesday updates, identified as KB5063875 and KB5063878. These cumulative updates feature Copilot key improvements, address login issues on new devices, and deliver significant enhancements to AI-powered functionalities within Windows 11. Most importantly, Microsoft has issued a critical security notice regarding Secure Boot certificate expiration in June 2026, urging organizations to prepare early to avoid future disruptions.
Below you’ll find a complete breakdown of the new Windows 11 August 2025 update, what IT professionals must prioritize, and the official Microsoft resources you need.
What’s New in the Windows 11 August 2025 Update?
Copilot Key Reliability & Restart Fixes
Recent Windows keyboards are equipped with a Copilot key to quickly launch the AI assistant. Many users reported the key would stop functioning after the first use, requiring a reboot to re-enable Copilot. The latest August updates (KB5063875 for older builds and KB5063878 for the new 24H2 build) deliver a targeted fix—users can now reliably use the Copilot key for multiple sessions without interruption.
For Microsoft’s official release notes on KB5063875 and KB5063878, refer to:
How to Verify the Fix
Microsoft details Copilot customization under Settings > Personalization > Text input. Additionally, you can remap or disable the Copilot key using Microsoft PowerToys, as detailed in this guide.
Authentication Delays on New Devices—Solved
System administrators rolling out fresh Windows 11 hardware, especially ones loaded with OEM preinstalled software, experienced slow authentication during first logins. The latest security update corrects these delays, streamlining both user onboarding and enterprise provisioning workflows.
Upgrades to Windows 11 AI Components
Microsoft’s August 2025 update delivers several optimizations to Windows 11’s integrated AI systems:
-
Image Search: Visual queries in Explorer, Photos, and Windows Search are now more responsive and accurate.
-
Content Extraction: Copying/pasting from screenshots, images, or PDFs is faster and better recognizes text.
-
Semantic Analysis: Copilot and Windows Search now interpret queries and document content more effectively for smarter suggestions.
Secure Boot Certificate Expiration: Critical June 2026 Deadline
The most urgent notice for all IT pros and Windows users centers on the impending expiration of Secure Boot certificates for most Windows devices in June 2026.
What is Secure Boot?
Secure Boot is a security protocol that authenticates the OS and boot process components, blocking malicious actors from hijacking the device before Windows loads. Its digital certificates, managed by Microsoft and OEMs, serve as this root of trust.
The 2026 Expiry and Microsoft’s Guidance
What you must know:
-
All Windows Secure Boot certificates (KEK, CA, UEFI CA) issued in 2011 start expiring in June 2026.
-
Devices not updated with new certificates could fail to boot, lose update eligibility, or fall out of compliance.
Official documentation from Microsoft:
Next Steps for IT Teams
-
Let Windows Update manage Secure Boot when possible: Supported Windows devices will receive new certificates via Windows Update. Keep all endpoints updated.
-
For managed (WSUS/ConfigMgr) environments: Monitor for dedicated Secure Boot certificate packages in late 2025–early 2026. Approve and deploy following Microsoft’s deployment recommendations.
-
Manual/Advanced: Reference Microsoft’s guide for checking and updating Secure Boot certificates:
Failure to update certificates means Windows devices may not boot or receive security fixes after June 2026, which could create widespread operational or security incidents.
How to Get the August 2025 Windows 11 Update
Using Windows Update:
-
Go to Settings > Windows Update and click Check for updates. Install KB5063875, KB5063878, or relevant security packages as offered.
-
Access the Windows 11 Download Page for installation/upgrade media direct from Microsoft.
Official support and update history:
Frequently Asked Questions (FAQ)
How do I check if my Secure Boot certificates will expire?
Follow Microsoft’s process for checking current certificate status, or use PowerShell/command-line steps in the official blog.
How will updates be delivered?
For most, Windows Update will handle certificate distribution automatically if devices are kept current. Organizations relying on WSUS or other management tools should monitor for Secure Boot certificate updates starting in late 2025.
Can I remap the Copilot key?
Yes. See Remap or Disable the Copilot Chatbot Key (Microsoft Learn).
Things to Remember
The August 2025 Windows 11 updates address major pain points for Copilot users, AI performance, and enterprise device reliability. Microsoft’s explicit warning about Secure Boot certificate expiration in June 2026 requires immediate planning.
What should you do?
-
Update all Windows 11 devices to the August 2025 release as soon as possible.
-
Track Secure Boot certificate guidance and schedule updates in your 2026 IT roadmap.
-
Stay informed via Microsoft’s official channels for any guidance updates or emergency announcements.
Don’t risk downtime or lost security: Bookmark the above official Microsoft links and ensure all team members understand what’s at stake this Patch Tuesday and beyond.
Related Posts
Discover more from Microsoft News Now
Subscribe to get the latest posts sent to your email.
