KB5055523: Fixed issue affecting machine password rotation in the Identity Update Manager certificate

April 8, 2025—KB5055523 (OS Build 26100.3775)

Highlights
This update addresses security issues for your Windows operating system.

Improvements
This security update includes improvements that were a part of update KB5053656 (released March 27, 2025). The following summary outlines key issues addressed by the KB update after you install it. Also, included are available new features. The bold text within the brackets indicates the item or area of the change.

• [Authentication] This update addresses an issue affecting machine password rotation in the Identity Update Manager certificate/Public Key Cryptography for Initial Authentication (PKNIT) path. This issue occurred particularly when Kerberos was used and Credential Guard was enabled, potentially causing user authentication problems. The feature Machine Accounts in Credential Gurad, which is dependent on password rotation via Kerberos, has also been disabled, until a permanent fix is made available.
• [Daylight Saving Time (DST)] Update for the Aysen region in Chile to support the government DST change order in 2025. For more info about DST changes, see the Daylight Saving Time & Time Zone Blog.
• [PcaUiArm] This update addresses an issue affecting the PcaUiArmUpdate feature, which results in unexpected behavior in specific scenarios.

If you installed earlier updates, your device downloads and installs only the new updates contained in this package.

For more information about security vulnerabilities, see the Security Update Guide and the April 2025 Security Updates.

AI Components
The following AI components have been updated with this release:

• Image Search : Version 1.7.820.0
• Content Extraction: Version 1.7.820.0
• Semantic Analysis: Version 1.7.820.0