KB5082314: addresses an issue affecting certificate renewal for Windows Hello for Business

*March 2, 2026—KB5082314 (OS Build 20348.4776) Out-of-band

Improvements
This out-of-band (OOB) update includes quality improvements and a fix. This update is cumulative and includes security fixes and improvements from the February 10, 2026, security update (KB5075906).

Additionally, this out-of-band update addresses an issue affecting certificate renewal for Windows Hello for Business in certain Active Directory Federation Services (ADFS)–based deployments on Windows Server 2022.

ADFS is a Windows Server role that provides federated authentication services and, in some on‑premises Windows Hello for Business certificate‑based environments, is responsible for validating and renewing user authentication certificates.

This issue is expected to affect only a small number of organizations using this specific deployment model and specific configurations on Windows Server 2022 systems and does not affect individual PCs or consumer devices.

Important: You should only apply this update to affected ADFS servers if they are using ADFS in combination with Windows Hello for Business. This fix is protected by Known Issue Rollback (KIR) and is disabled by default. Installing this update alone does not enable the fix. The KIR enablement Group Policy is provided only by Microsoft Support and is intended for customers who are confirmed to be affected by this issue.