Table of Contents
Is Your Surface Hub v1 at Risk? Negative Effects of Windows 10 Update KB5060533
The June 10, 2025 cumulative update KB5060533 for Windows 10 (versions 21H2 and 22H2) introduced a significant boot issue for Surface Hub v1 devices.
Surface Hub v1, originally promoted as a premium corporate presentation device, is now discontinued and will lose Windows 10 support after October 2025.
Only the Enterprise, Education, and IoT editions of Windows 10 21H2 continue to receive updates.
Details of the Issue
After installing update KB5060533, Surface Hub v1 devices may fail to boot, displaying the error:
“Secure Boot Violation: Invalid signature detected. Check the Secure Boot policy in Setup.”
This issue was not initially documented; Microsoft later updated the Known Issues section to confirm the problem.
Microsoft’s Response
On June 11, 2025, Microsoft removed the problematic component from the update package to prevent further devices from being affected.
The update was reissued for devices that still require it, with the faulty code excluded.
Microsoft has provided a workaround to block the issue on additional Surface Hub v1 units, but a comprehensive fix is still pending.
Surface Hub 2S and Surface Hub 3 are not impacted by this update.
Additional Considerations
The root cause may relate to Secure Boot policy changes, similar to issues seen with some Fujitsu devices, but this is not yet confirmed. Microsoft is actively investigating and will share further guidance as soon as a permanent solution is available.
Key Takeaways
- Administrators managing Surface Hub v1 devices should delay installing update KB5060533 until a full fix is released.
- Monitor Microsoft’s official channels for updates regarding a permanent resolution.
- Consider planning for device replacement, as Windows 10 support for Surface Hub v1 ends in October 2025.