[German]Quick warning to administrators who are still managing a Surface Hub v1 as a large screen. The update KB5060533 from June 10, 2025 for Windows 10 21H2-22H2 causes boot problems. But the primary root cause has been removed by Microsoft on June 11, 2025 – a fix is still outstanding.
The Surface Hub v1
The Surface Hub v1 is the first version of the large display that was marketed by Microsoft years ago as "the presentation medium par excellence" for companies. Below are two screenshots of devices of this type (successors were Surface Hub 2S and 3) – the devices were not cheap..
The Surface Hub v1 was delivered with Windows 10 and advertised for use in companies. In the meantime, Microsoft has long since discontinued marketing and probably also development. In October 2025, the Windows 10 installed on the devices will no longer be supported.
Windows 10 Update KB5060533
Cumulative Update KB5060533 dated June 10, 2025 contains security fixes for Windows 10 21H2 and 22H2, which are mentioned in the article Microsoft Security Update Summary (June 10, 2025)).
With version 21H2, only the Enterprise, Edcuation and IoT versions are still supported (see Patchday: Windows 10/11 Updates (June 10, 2025)). When the update was released, there was only talk of font problems.
Boot problems confirmed by the update
A list of the updates can be found on this Microsoft website. In the support article for update KB5060533, however, Microsoft has since made an addition in the Known Issues section (noticed here).
After installing this update for Windows 10 version 22H2, Surface Hub v1 devices may no longer boot and show the error message: "Secure Boot Violation: Invalid signature detected. Check the Secure Boot policy in Setup."
Microsoft has already responded as of June 11, 2025 and writes that it has published a workaround that prevents this problem from occurring on further Surface Hub v1 devices. Specifically, this means that the faulty component has been removed from the update package and the update has been made available again for machines that are still being updated.
Whether it has to do with the update of the dbx entry for the Secure Boot, which causes trouble with Fujitsu machines (see Caution: Windows June 2025 updates bricks Fujitsu computers), I don't know.
Microsoft is currently looking for a solution and will provide more information as soon as it is available. Surface Hub 2S and Surface Hub 3 are not affected by this problem.
Addendum: Microsoft released an out-of-band update KB5063159 for Windows 10 22H2 to fix the issue (see Windows 10 22H2: Out-of-Band Update KB5063159).
Similar articles:
Microsoft Security Update Summary (June 10, 2025)
Patchday: Windows 10/11 Updates (June 10, 2025)
Patchday: Windows Server-Updates (June 10, 2025)
Patchday: Microsoft Office Updates (June 10, 2025)
Windows 11 24H2: Out-of-Band Update KB5063060
Windows 10/11: Preview Updates May 27, 28,2025
Attention: June 2025 Patchday closes vulnerability CVE-2025-33073 in Windows
Windows network vulnerability CVE-2025-33073 (Reflective Kerberos Relay Attack)
