Windows 11 KB5089573 Released With Battery, USB, and Secure Boot Improvements

Microsoft has released KB5089573 for Windows 11 versions 25H2 and 24H2, bringing more than the already reported Shared Audio and NPU monitoring features.

The update also includes several reliability and performance improvements across USB devices, standby behavior, input, File Explorer, the Microsoft Store, and Secure Boot certificate rollout. Some features are rolling out gradually, so they may not appear on every PC right after installation.

USB devices and external displays should work more reliably

One of the more useful fixes in KB5089573 targets displays connected through USB4 docks and hubs. Microsoft says these displays should now turn on more reliably, especially when users wake their PCs from standby.

The update also improves the USB3 stack with better recovery and resiliency against certain unexpected hardware faults. In practice, users should see fewer reliability issues with USB accessories and connected devices.

Microsoft improves battery life and standby behavior

KB5089573 also includes several power-related fixes. Microsoft improved resiliency against apps that could keep the sensor hub powered on, which may help prevent unnecessary battery drain.

The update also improves battery life in scenarios involving failed HID devices. Microsoft has improved power handling for apps that try to start HID transfers while the device is in standby.

Input, clipboard, and sign-in reliability get fixes

The touch keyboard should now work more reliably on the sign-in screen, including when users enter or change a password.

Microsoft also improved Explorer.exe reliability when closing the input switcher. Clipboard history should now open and navigate faster, which should make copy-and-paste workflows feel smoother.

Fonts, desktop icons, and Task Scheduler receive smaller fixes

The Times New Roman font family has been updated in this release. Microsoft says the change improves how combining diacritical marks appear in Greek and Cyrillic scripts, making text more accurate and readable.

Task Scheduler now remembers column width changes in the task list view and saves those adjustments across sessions.

Microsoft also improved the reliability of loading desktop app shortcuts, which should reduce cases where desktop icons fail to appear correctly.

Microsoft Store downloads should perform better

The Microsoft Store also gets under-the-hood changes in KB5089573. Microsoft says download performance and bandwidth usage have been improved.

Error reporting should also work better when Store downloads fail because Windows Update group policy settings are enabled.

Windows reliability improves across key areas

The update includes broader reliability improvements for the sign-in and lock screens, File Explorer, and touch gestures on touchscreen devices.

Changing themes in Settings should also work more reliably after installing this update.

Secure Boot certificate rollout gets better targeting

KB5089573 also updates how Windows handles Secure Boot certificate rollout. Windows quality updates now include more high-confidence targeting data, which should help more eligible devices automatically receive the new Secure Boot certificates.

Microsoft says devices only receive the certificates after Windows collects enough successful update signals.

The update also adds a new LimitSecureBootRequiredServiceData policy for Group Policy and MDM. When enabled, Windows limits Secure Boot service data sent to Microsoft by suppressing the usual event. Microsoft says the policy belongs to the Windows Restricted Traffic Limited Functionality Baseline.

Microsoft has also recently explained what could happen to PCs that skip the newer Secure Boot certificate update, making these rollout changes more important for long-term security support.