Add Techlomedia as a preferred source on Google. 
Microsoft has released the first non-security preview update of 2026 for Windows 11 under KB5074105. Along with this update, the company has also pushed new Dynamic Updates that focus on Windows setup and recovery improvements.
Dynamic Updates are not regular feature updates. They are designed to improve the Windows installation and upgrade process. These updates mainly target the Windows Recovery Environment, also known as WinRE or Safe OS, and the Setup files used during Windows upgrades.
This time, Microsoft has released two Dynamic Update packages for Windows 11 versions 24H2 and 25H2. What makes this update notable is that Microsoft has shared a detailed changelog, which is not very common for Dynamic Updates.
The first update is KB5074110, which is a Setup Dynamic Update. This update makes changes to Secure Boot. Microsoft is replacing the older 2011 signed boot manager file with a newer version signed using the Windows UEFI CA 2023 certificate. This is part of Microsoft’s long-term plan to move away from older Secure Boot certificates.
However, Microsoft has also warned users and IT admins to be careful. Resetting the Secure Boot database or turning Secure Boot off and on after this update can trigger Secure Boot violation errors. In rare cases, users may need to create Secure Boot recovery media to fix the issue.
The second update is KB5074111, which is a Safe OS Dynamic Update. This update fixes a bug where the KDNET debugging tools could stop responding when Boot Manager debugging was enabled during startup. It also resolves an accessibility issue where Narrator failed to start when Windows was installed using an ISO file.
Microsoft says both the Setup and Recovery updates will be downloaded and installed automatically through Windows Update. Users do not need to manually install them.
These Dynamic Updates also help preserve Language Packs and Features on Demand during upgrades. This is important for users who rely on optional Windows features. For example, VBScript is currently a Feature on Demand in Windows 11 24H2, and Dynamic Updates help ensure it remains intact during upgrades.
It shows Microsoft is focusing more on stability and recovery rather than visible features. WinRE updates are especially important because they help systems recover when Windows fails to boot or encounters serious errors.
There is also a bigger reason behind the Secure Boot changes. Older Secure Boot certificates are expected to expire in the coming months. By pushing these updates early, Microsoft is trying to avoid large-scale boot issues later in 2026.
For most users, there is nothing specific to do. These updates install automatically in the background. If you use Secure Boot and frequently change firmware settings, it is worth being aware of the warning Microsoft shared.
Follow Techlomedia on Google News to stay updated. 
Affiliate Disclosure:
This article may contain affiliate links. We may earn a commission on purchases made through these links at no extra cost to you.
