KB5134124: Cumulative update for Windows 10, version 1809, October 2026. Updated trusted-root certificates for disconnected devices
Devices that miss automatic certificate trust updates get an updated trusted-root certificate payload. This out-of-band release is intended for systems that cannot reach Microsoft's certificate service or have automatic updates disabled.
Does it affect you? Applies to: Windows 10 Enterprise LTSC 2019 and Windows Server 2019 devices that do not receive current certificate trust list updates. This includes disconnected devices, devices unable to reach Microsoft's certificate-update service, and devices with automatic updates disabled.
Review notes Additional details from the official release notes (1) Read note
- Does it affect you? The update is intended for devices where automatic certificate trust list (CTL) updates are disabled.
The official sources are linked at the end of the page.
Microsoft publishes separate notes for this KB for Windows Server.
What changes
Improvements 3 changes
Certificates
-
Devices that cannot get certificate updates from the usual service receive an updated trusted root certificate payload.1
The payload is included in the Windows cumulative update for devices that cannot access Microsoft's certificate-update service or have automatic certificate trust list (CTL) updates disabled.
- The release note now links to more information about certificate trust changes related to eMudhra.3
Servicing stack
-
The servicing stack update adds checks to confirm whether a device is hosted on Azure.2
The SSU uses an updated certificate chain for Azure-hosting validation.
Known issues
-
USB Audio Class 1.0 devices with error Code 10 or no output
Some USB Audio Class 1.0 devices might show Code 10 or produce no audio. The September 14 OOB update fixes symptoms with 8-channel or 3D audio, but other symptoms remain.4
How to apply the workaround WorkaroundFor symptoms not addressed by the September 14 OOB update, IT administrators can contact Microsoft Support for Business for immediate help.4
Technical details
Data sheet · Security · Downloads · Components Click to collapse or expand
Data sheet
- Released
- 2026-10-26
- Classification
- Updates
- Type
- Cumulative update
- Restart
- Required
- Replaces
- KB5126651, KB5129238, KB5122876, KB5120238
- Replaced by
- KB5131085
| Version | Build | Channel |
|---|---|---|
| 1809 | 17763.9378 | General availability |
Security
No vulnerabilities are listed for this update.
Downloads (Microsoft Update Catalog)
Updated components
29 files changed since the previous update for the same versions.
| Top changed components | Files |
|---|---|
| Security and sign-in | 2 |
Page history
-
Known issue resolved: USB Audio Class 1.0 devices with error Code 10 or no output (KB5129238)
-
Superseded by KB5131085
Sources
Cited passages from Microsoft's official notes (4)
-
1.
This update includes an updated trusted root certificate payload in the Windows cumulative update for devices that cannot access Microsoft’s certificate-update service and devices where automatic certificate trust list (CTL) updates are disabled.
support.microsoft.com -
2.
This servicing stack update (SSU) includes enhanced logic to verify whether a device is hosted on Azure, leveraging an updated certificate chain for validation.
support.microsoft.com -
3.
Updated the release note to link to additional information about the Windows certificate trust changes related to eMudhra.
support.microsoft.com -
4.
This issue is partially resolved in the out-of-band (OOB) update released on September 14, 2026. This OOB update resolves the symptoms experienced on devices using 8-channel or 3D audio modes.
support.microsoft.com
Checked automatically: 8 of 8 checks passed, 4 quoted passages · compared with Microsoft's page on Nov 14, 2026
- Quotes found in the official pages: passed
- Numbers found in the sources: passed
- Vulnerabilities from the dossier only: passed
- Links to allowed domains only: passed
- Every official change covered: passed
- Readable plain text: passed
- Changes confirmed by the file list: passed
- Sources agree: passed
A second AI read the text against the sources: correctness 4/5, clarity 3/5, completeness 5/5. How we work
Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake