Windows Server Update Services (WSUS) and Microsoft Endpoint Configuration Manager

This update is available through the following release channels. We are working on a resolution and will provide an update in an upcoming release. In this case, the error can be safely ignored. You do not need this update if the PC does not have a recovery partition. When you try to apply this update on a PC that has no recovery partition, the update is unsuccessful and you receive the error 0x80070643 ERROR_INSTALL_FAILURE. To avoid this error or recover from this failure, please follow the Instructions to manually resize your partition to install the WinRE update and then try installing this update. If the recovery partition does not have sufficient free space, this update will fail. In this case, you will receive the following error message: This update requires 250 MB of free space in the recovery partition to install successfully.

This update automatically applies Safe OS Dynamic Update ( KB5034232) to the Windows Recovery Environment (WinRE) on a running PC to address a security vulnerability that could allow attackers to bypass BitLocker encryption by using WinRE. For more information, see CVE-2024-20666.