The Update BureauKB5082314: Cumulative update for Windows Server, version 2022, March 2026. ADFS certificate-renewal issue addressed for specific deployments
Addresses a Windows Hello for Business certificate-renewal issue in certain ADFS deployments on Windows Server 2022. The fix is disabled by default and must be enabled through Microsoft Support.
Does it affect you? Applies to: This update applies to Windows Server 2022. The certificate-renewal fix concerns only certain organizations using ADFS with Windows Hello for Business on Windows Server 2022.
What changes
Fix 1 change
Windows Hello for Business
For: Organizations using ADFS with Windows Hello for Business
-
Addresses a certificate-renewal issue in certain Windows Hello for Business deployments using ADFS on Windows Server 2022. The fix is disabled by default and must be enabled through Microsoft Support.1
The Known Issue Rollback (KIR) enablement Group Policy is provided only by Microsoft Support to customers confirmed to be affected.
Known issues
-
Windows Server Update Services (WSUS) does not display error details
After KB5070884 or later updates, WSUS does not display synchronization error details. This functionality was temporarily removed to address CVE-2025-59287; the issue is not described as being caused by this update.2
Workaround status No workaround yetMicrosoft has not published a manual workaround for this issue yet. Monitor release health until a resolving update is available.
Technical details
Data sheet · Security · Downloads · Components Click to collapse or expand
Data sheet
- Released
- 2026-03-02
- Classification
- Updates
- Type
- Cumulative update
- Restart
- Required
- Replaces
-
KB5075906, KB5078136, KB5077800, KB5073457
+32 earlier
KB5071547, KB5068787, KB5070884, KB5066782, KB5065432, KB5063880, KB5062572, KB5060526, KB5061906, KB5058385, KB5059092, KB5058920, KB5055526, KB5053603, KB5051979, KB5052819, KB5049983, KB5048654, KB5046616, KB5047767, KB5044281, KB5042881, KB5041160, KB5040437, KB5041054, KB5039227, KB5037782, KB5036909, KB5037422, KB5035857, KB5034770, KB5034129 - Replaced by
- KB5078766
| Version | Build | Channel |
|---|---|---|
| 2022 | 20348.4776 | General availability |
Security
No vulnerabilities are listed for this update.
Downloads (Microsoft Update Catalog)
Updated components
56 files changed since the previous update for the same versions.
| Top changed components | Files |
|---|---|
| Graphics and display | 7 |
| File Explorer and shell | 3 |
| Printing | 1 |
| Remote Desktop | 1 |
| Secure Boot | 1 |
Sources
Cited passages from Microsoft's official notes (2)
-
1.
Additionally, this out-of-band update addresses an issue affecting certificate renewal for Windows Hello for Business in certain Active Directory Federation Services (ADFS)–based deployments on Windows Server 2022.
support.microsoft.com -
2.
After installing KB5070884 or later updates, Windows Server Update Services (WSUS) does not display synchronization error details within its error reporting. This functionality is temporarily removed to address the Remote Code Execution Vulnerability, CVE-2025-59287.
support.microsoft.com
Checked automatically: 8 of 8 checks passed, 2 quoted passages · compared with Microsoft's page on Sep 25, 2026
- Quotes found in the official pages: passed
- Numbers found in the sources: passed
- Vulnerabilities from the dossier only: passed
- Links to allowed domains only: passed
- Every official change covered: passed
- Readable plain text: passed
- Changes confirmed by the file list: passed
- Sources agree: passed
A second AI read the text against the sources: correctness 5/5, clarity 4/5, completeness 5/5. How we work
Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake