The Update BureauKB5134123: Cumulative update for Windows 10, version 1607, October 2026. Offline devices get updated trusted certificates
Devices that cannot reach Microsoft’s certificate service get updated trusted certificate data. Support for this edition ended October 13, 2026.
Does it affect you? Applies to: Windows 10, version 1607 Enterprise 2016 LTSB devices that cannot get current certificate trust list updates. The update is intended for x86 and x64 devices.
Review notes Additional details from the official release notes (5) Read notes
- This page The update is intended for devices that do not receive current certificate trust list updates, including devices where automatic updates are disabled.
- In short The update adds trusted certificate data for devices that cannot access Microsoft’s certificate-update service or have automatic CTL updates disabled.
- What changes The update adds trusted certificate data for devices that cannot access Microsoft’s certificate-update service or have automatic CTL updates disabled.
- What to do Microsoft recommends installing the latest SSU, KB5126649, first; without it, the update might not install.
- What changes The release note was updated to link to additional information about Windows certificate trust changes related to eMudhra.
The official sources are linked at the end of the page.
Microsoft publishes separate notes for this KB for Windows Server.
What changes
Improvement 1 change
Certificates
For: Devices without current certificate trust list updates
-
Devices that cannot get certificate updates from Microsoft receive updated trusted certificate data.1
Adds an updated trusted root certificate payload for devices that cannot access Microsoft’s certificate-update service or have automatic CTL updates disabled.
Known issues
-
USB Audio Class 1.0 devices with error Code 10 or no output
Some USB Audio Class 1.0 devices might show Code 10 or produce no sound. The September 14 OOB update fixed only 8-channel and 3D audio symptoms; other symptoms remain.2
How to apply the workaround WorkaroundIT administrators can contact Microsoft Support for Business for an immediate workaround for symptoms not yet addressed.2
Technical details
Data sheet · Security · Downloads · Components Click to collapse or expand
Data sheet
- Released
- 2026-10-26
- Classification
- Updates
- Type
- Cumulative update
- Restart
- Required
- Replaces
- KB5126868, KB5129239, KB5123099, KB5120418
- Replaced by
- KB5131291
| Version | Build | Channel |
|---|---|---|
| 1607 | 14393.9615 | General availability |
Security
No vulnerabilities are listed for this update.
Downloads (Microsoft Update Catalog)
Updated components
45 files changed since the previous update for the same versions.
| Top changed components | Files |
|---|---|
| Security and sign-in | 2 |
Page history
-
Superseded by KB5131291
Sources
Cited passages from Microsoft's official notes (2)
-
1.
This update includes an updated trusted root certificate payload in the Windows cumulative update for devices that cannot access Microsoft’s certificate-update service and devices where automatic certificate trust list (CTL) updates are disabled.
support.microsoft.com -
2.
After installing the September 8, 2026, Windows security update, some USB Audio Class 1.0 devices might fail to start or produce audio.
support.microsoft.com
Checked automatically: 8 of 8 checks passed, 2 quoted passages · compared with Microsoft's page on Nov 8, 2026
- Quotes found in the official pages: passed
- Numbers found in the sources: passed
- Vulnerabilities from the dossier only: passed
- Links to allowed domains only: passed
- Every official change covered: passed
- Readable plain text: passed
- Changes confirmed by the file list: passed
- Sources agree: passed
A second AI read the text against the sources: correctness 3/5, clarity 4/5, completeness 3/5. How we work
Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake