Merge pull request #10409 from MicrosoftDocs/main

Auto Publish – main to live - 2025-12-19 02:00 UTC

Author: learn-build-service-prod[bot]

support/windows-client/setup-upgrade-and-drivers/windows-10-windows-11-23h2-upgrade-fails-0x000000c1-0x80092003.md

@@ -0,0 +1,54 @@
+---
+title: Error 0x000000c1 or 0x80092003 CRYPT_E_FILE_ERROR Stops In-place Upgrade from Windows 10 to Windows 11
+description: Discusses an issue in which an in-place upgrade to Windows 11, version 23H2 fails and rolls back on a Windows 10 device that has the UEFI CA 2023 signed bootloader installed.
+ms.date: 12/18/2025
+manager: dcscontentpm
+audience: itpro
+ai-usage: ai-assisted
+ms.topic: troubleshooting
+ms.reviewer: warrenw, kaushika, v-appelgatet
+ms.custom:
+- sap:windows setup,upgrade and deployment\installing or upgrading windows
+- pcy:WinComm Devices Deploy
+appliesto:
+- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Supported versions of Windows Client</a>
+---
+# Error 0x000000c1 or 0x80092003 CRYPT_E_FILE_ERROR stops in-place upgrade from Windows 10 to Windows 11
+
+This article discusses an issue in which an in-place upgrade to Windows 11, version 23H2 fails and rolls back on a Windows 10 device that has the UEFI CA 2023 signed bootloader installed.
+
+## Symptoms
+
+Consider the following scenario:
+
+- You have a Windows 10 device that uses the UEFI CA 2023 signed bootloader that was provided in an update on or after July 9, 2024.
+- By using Windows Update (or media that you downloaded from Windows Update), you perform an in-place upgrade to upgrade the device from Windows 10 to Windows 11, version 23H2.
+
+After the upgrade reaches the OOBE restart phase, the upgrade fails, rolls back to Windows 10, and generates one of the following error codes:
+
+- 0x80092003 (CRYPT_E_FILE_ERROR)
+- 0x000000c1
+
+If you upgrade the device by using the latest Windows 11 23H2 ISO image as source media, the upgrade succeeds. Similarly, if you upgrade the device to Windows 11 24H2 by using the [Windows 11 Installation Assistant](https://www.microsoft.com/en-us/software-download/windows11), the upgrade succeeds.
+
+## Cause
+
+Windows updates that were released on or after July 9, 2024, contain protections for a publicly disclosed Secure Boot security feature bypass. These updates install the UEFI CA 2023-signed bootloader, %systemdrive%\bootmgfw_2023.efi. For more information about this vulnerability and its fix, see the following articles:
+
+- [Secure Boot Security Feature Bypass Vulnerability, CVE-2023-24932](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24932)
+- [How to manage the Windows Boot Manager revocations for Secure Boot changes associated with CVE-2023-24932](https://support.microsoft.com/topic/how-to-manage-the-windows-boot-manager-revocations-for-secure-boot-changes-associated-with-cve-2023-24932-41a975df-beb2-40c1-99a3-b3ff139f832d)
+
+The issue occurs because this file wasn't part of the original Windows 11 23H2 upgrade media or Safe OS Dynamic Update (SafeOS DU) media. The upgrade process uses the Windows Recovery Environment (WinRE) while it validates or updates startup files. Because the bootloader on the device is newer than the bootloader in the Windows 11 upgrade media, the upgrade process can't update startup information on the WinRE image under %systemroot%\~BT\Sources\Rollback\EFI\Microsoft\Recovery. Therefore, the upgrade fails and rolls back.
+
+This issue doesn't affect the latest version of the Windows 11, version 23H2 media; the Windows 11, version 24H2 media; or media for later versions.
+
+## Resolution
+
+The fix for this issue was released on February 11, 2025. To implement this fix during your in-place upgrade, use one of the following methods:
+
+- Upgrade directly to Windows 11, version 24H2 or a later version. Use either Windows Update or media that was created after February 11, 2025.
+- Upgrade to the latest release of Windows 11, version 23H2. Use either Windows Update or media that was created after February 11, 2025.
+- If you have to upgrade to an earlier version of Windows 11, use one of the following methods:
+
+  - During the upgrade process, allow the device to connect to Windows Update to automatically download and install [KB5052424: Safe OS Dynamic Update for Windows 11, version 22H2 and 23H2: February 11, 2025 - Microsoft Support](https://support.microsoft.com/topic/kb5052424-safe-os-dynamic-update-for-windows-11-version-22h2-and-23h2-february-11-2025-09aa3ccd-7eb0-4009-af9e-5e01c7492279).
+  - Modify the installation media image to slipstream the KB5052424 update.

support/windows-client/toc.yml

@@ -887,6 +887,8 @@ items:
       href: ./setup-upgrade-and-drivers/desktop-wakes-up-unexpectedly-from-sleep-hibernation.md
     - name: Devices attached to Thunderbolt Dock stop working
       href: ./setup-upgrade-and-drivers/devices-connected-via-thunderbolt-dock-not-work.md
+    - name: Error 0x000000c1 or 0x80092003 CRYPT_E_FILE_ERROR stops in-place upgrade from Windows 10 to Windows 11
+      href: ./setup-upgrade-and-drivers/windows-10-windows-11-23h2-upgrade-fails-0x000000c1-0x80092003.md
     - name: Fast startup causes system shutdown
       href: ./setup-upgrade-and-drivers/fast-startup-causes-system-hibernation-shutdown-fail.md
     - name: Hard disk usage reaches 100 percent