It seems that #Windows #Update #KB5012170 updates the #SecureBoot DBX database to exclude some exploits. Unfortunately this may fail with 0x800f0992 on installation with incompatible firmwares. OVMF_CODE.secboot.fd for #QEMU/#KVM/#libvirt seems to be just that. Switch to the 4M-version of the firmware which has 4 Megabytes allocated instead of 2M to fix this.

Well, it happened. After a whole weekend of worrying about it, my first WFH user reports her PC is completely bricked by the KB5012170 update. BSOD and the whole shebang.

On behalf of the entire IT community, I would like to express my sincere gratitude and thanks to Microsoft for continuing to justify my existence.

#KB5012170 #windowsupdate #windowsUpdateHorror

Well, it happened. After a whole weekend of worrying about it, my first WFH user reports her PC is completely bricked by the KB5012170 update. BSOD and the whole shebang.

On behalf of the entire IT community, I would like to express my sincere gratitude and thanks to Microsoft for continuing to justify my existence.

#KB5012170 #windowsupdate #windowsUpdateHorror

Secure Boot Update #KB5012170 from August 2022 also for #Windows11 22H2

https://borncity.com/win/2022/12/09/windows-11-22h2-secure-boot-dbx-update-kb5012170-dec-2022/

Secure Boot (DBX) Update #kb5012170 auch für #Windows11 22H2

https://www.borncity.com/blog/2022/12/08/windows-11-22h2-secure-boot-dbx-update-kb5012170-dez-2022/

Windows 11 22H2 KB5012170 metadata was revised last Thursday to require
two new Prerequisites:
- SSU 22621.378 (at least)
- Windows 365 Cloud PC block detectoid

however, the latter detectoid is deployed and applicale only for Windows 11 21H2

therefore, Windows 11 22H2 will (mistakenly) no longer get KB5012170 via WU

#WindowsUpdates #SSU #PatchTuesday Win11 #22H2 #21H2 #KB5012170

Per: @abbodi86 on #PatchManagement

(SSU = Service Stack Update)

The Secure Boot DBX Update #KB5012170 has been re-released on WSUS - it's not clear, what's changed, be careful.

https://borncity.com/win/2022/10/17/windows-update-kb5012170-secure-boot-dbx-mit-neuer-revision-im-wsus-okt-2022/

Das Secure Boot DBX Update #KB5012170 ist im WSUS erneut für Windows freigegeben worden.

https://www.borncity.com/blog/2022/10/17/windows-update-kb5012170-secure-boot-dbx-mit-neuer-revision-im-wsus-okt-2022/

Update #kb5012170 fordert ggf. Bitlocker Schlüssel an.

https://www.borncity.com/blog/2022/08/17/update-kb5012170-fr-secure-boot-dbx-verursacht-bitlocker-probleme/