Microsoft releases Windows 11 KB5089573 preview update with performance and reliability upgrades

At a glance:

• Microsoft's KB5089573 preview update targets Windows 11 versions 25H2 and 24H2 with 30 changes.
• Key improvements include faster app launches, enhanced Windows Hello sign-in behavior, and updated Secure Boot certificates.
• A known issue with Windows Server 2016 domain controllers follows the May 2026 security update.

What's new in KB5089573

Microsoft has rolled out the KB5089573 preview cumulative update for Windows 11 versions 25H2 and 24H2, introducing 30 changes focused on performance and reliability. This non-security update is part of the company's monthly preview schedule, allowing IT administrators and users to test features before broader Patch Tuesday deployment. Unlike standard security updates, preview updates are optional and exclude critical security patches, positioning them as a testing ground for upcoming functionality.

The update accelerates core user experiences, including app launch times and interactions with the Start menu, Search, and Action Center. Windows Hello enhancements prioritize face or fingerprint authentication as default sign-in methods, even after prior PIN usage, unless three consecutive PIN entries trigger a temporary switch. Reliability improvements span File Explorer stability, lock screen and sign-in screen behavior, theme changes in Settings, and touch gesture responsiveness on touchscreen devices. Additionally, the update optimizes power management for sensors and Human Interface Device (HID) stacks, reducing battery drain from hibernation resume and failed HID device transfers.

Secure Boot certificate rollout

The May 2026 update includes expanded Secure Boot certificate targeting for eligible devices. High-confidence device data now enables automatic delivery of updated certificates, replacing original 2011 certificates set to expire in late June. Microsoft emphasized a phased rollout approach, requiring devices to demonstrate successful update signals before receiving new certificates. This follows a January 2026 announcement outlining plans to refresh expiring certificates, after November 2025 warnings to IT admins about the impending deadline.

Known issues and compatibility

Microsoft confirmed a known issue affecting Windows Server 2016 systems post-installation of the KB5087537 security update. Domain controller lookup failures have been reported, though the company has not yet provided a resolution timeline. Users and administrators are advised to monitor Microsoft's support channels for updates on this matter. The KB5089573 update itself upgrades Windows 11 25H2 and 24H2 to builds 26200.8524 and 26100.8524, respectively, and can be installed manually via the Microsoft Update Catalog or through Settings > Windows Update > Check for Updates.

How to install and what to expect

Optional preview updates like KB5089573 require manual installation unless the "Get the latest updates as soon as they're available" setting is enabled. Users will see a "Download and install" prompt unless automatic updates are configured. Key improvements in this release include shared audio functionality for dual-user scenarios, corrected CPU speed reporting in Task Manager for virtual machines, and enhanced power efficiency for sensor and HID components. These changes aim to refine user experience while preparing systems for future security certificate transitions.