KB5089549 Install error - 0x800f0845

Question

KB5089549 Install error - 0x800f0845

John C 5

Beelink GTi13 mini-pc

Processor 13th Gen Intel(R) Core(TM) i9-13900HK (2.60 GHz)

Installed RAM 96.0 GB (95.8 GB usable)

System type 64-bit operating system, x64-based processor

Edition Windows 11 Pro

Version 25H2

Installed on ‎17/‎05/‎2026

OS build 26200.7840

Experience Windows Feature Experience Pack 1000.26100.291.0

I have tried every bit of advice I could find online.

Both KB5089549 and KB5087051 have been failing install with a "kmode exception not handled" error leading to "Your device ran in to a problem" and an auto repair. The repair has worked every time so far but Windows update still want to install these two updates.

I thought my problem was due to my Beelink not having Secure Boot enabled, so I have now enabled that. I also had a good hope of setting the Beelink TPM Device Selection from dTPM to PTT, because the GTi13 does not have a physicak TPM chip, but still KB5089549 fails.

I have checked EFI partition size ( my PC is dual Windows 11 boot and has two ). Both seem to have plenty of space.

I have run the following;

SC config trustedinstaller start=auto

net stop bits

net stop wuauserv

net stop msiserver

net stop cryptsvc

net stop appidsvc

Ren %Systemroot%\SoftwareDistribution SoftwareDistribution.old

Ren %Systemroot%\System32\catroot2 catroot2.old

regsvr32.exe /s atl.dll

regsvr32.exe /s urlmon.dll

regsvr32.exe /s mshtml.dll

netsh winsock reset

netsh winsock reset proxy

rundll32.exe pnpclean.dll,RunDLL_PnpClean /DRIVERS /MAXCLEAN

dism /Online /Cleanup-image /ScanHealth

dism /Online /Cleanup-image /CheckHealth

dism /Online /Cleanup-image /RestoreHealth

dism /Online /Cleanup-image /StartComponentCleanup

Sfc /ScanNow

net start bits

net start wuauserv

net start msiserver

net start cryptsvc

net start appidsvc

I have tried installing KB5089549 with real time protection off.

I have tried installing Windows 11, version 25H2 (repair version).

Nothing I have tried has changed how KB5089549 fails.

Neil D 33,130 Reputation points Volunteer Moderator

2026-05-19T14:07:23.1133333+00:00

This update has been problematic for a few users.

It took me a few days to get it to download and install. I restarted windows a few times during that time then checked for updates again.

Eventually it downloaded and installed but was very slow to do so.
John C 5 Reputation points

2026-05-19T14:21:26.5066667+00:00

Thanks Neil. I will just keep an eye on it for a while and see what happens. This all started for me with KB5087051 failing weeks ago. It got to the point for me that I paused updates for 5 weeks. Once the updates resumed I found I had KB5087051 and KB5089549 failing to install. Since KB5087051 did finally install yesterday, I have some hope that KB5089549 might eventually install too.
Gl0wSticks 0 Reputation points

2026-05-20T09:37:40.3633333+00:00

This has been going on for like 5 days for me. The first time I tried to download/install these my PC crashed and ruined my NVidia drivers... I had flashing screens after booting windows.. I had to use DDU in safemode to fix all that. Sometimes while trying to retry these or pause the updates me PC will crash, so I'm not attempting these anymore. Until some type of fix comes out. (These are both being reported not installing, google it)

I've done a multitude of troubleshooting, and nothing seems to fix. I heard the EFI lacks space, but I'm not messing with that. I've done SFC, DSIM, do x measure then try the updates again. Nothing works, also system restore only shows the May 17th or something ONLY option..

My computer is running terrible slow for games now, displays 60 FPS for example but is not 60 FPS. Mouse lag, desktop is in general is slower. NOT unusable but it's giving me migraines using the PC the past 5 days.
Neil D 33,130 Reputation points Volunteer Moderator

2026-05-20T10:03:10.1766667+00:00

There is a known issue. The KB detail includes a workaround May 12th KB5089549 update - Microsoft although it may be worth waiting for next months update or if a fix appears in windows update.
John C 5 Reputation points

2026-05-21T02:34:18.2633333+00:00

Thanks Neil, I'm not sure if you were replying to Gl0wSticks or me. In another comment here I have said that I was already aware of the known issue. It is, unfortunately, not relevant to my system. I have two EFI partitions, both with plenty of space.

Yesterday I updated my Beelink mini-pc to latest BIOS. Trying the update after that did not work.

My feeling has been that the failure is something to do with secure boot keys/certificates. One reason I wanted to update my PC BIOS is that Windows was saying that secure boot was enabled but it was flagging a certificate expiration problem. Clicking on the link with problem takes me to a lot of information, including, certificates should be updated with certain Windows updates.

Tonight I had an idea - boot from my second Windows 11 partition and try KB5089549 there. I tried manual install which did not complete but I was interested to see that Windows was reporting "secure boot enabled and all required certificates installed". So, I rebooted my main Windows 11 and for the first time ever I see "secure boot enabled and all required certificates installed" which kind of makes sense because the cetrificates are in the BIOS, yes? That is why I wanted to try KB5089549 manually from my second, fresh install of Windows 11 - if that could update the Windows secure boot certificates, then surely problem solved?

So, my next step will be to reboot my main Windows 11 and see what happens. Perhaps with secure boot certificates in good condition, KB5089549 will no longer have a problem....
Neil D 33,130 Reputation points Volunteer Moderator

2026-05-21T08:10:44.9033333+00:00

@John C the comment was for @Gl0wSticks and it does have a reference to secure boot in the KB info page.

Did you receive the KEK update? It should be shown in Update history under Other updates.
John C 5 Reputation points

2026-05-21T11:38:03.6266667+00:00

Thanks Neil. I have not seen the KEK update. My Other Updates go back to 8th Dec 2025 and only show Windows Malicious Software Removal Tool updates.
Neil D 33,130 Reputation points Volunteer Moderator

2026-05-21T12:32:37.6733333+00:00

@John C the update should be offered when the telemetry from the device shows it is ready. I'm not sure how you would check manually but it would include an up to date bios from the manufacturer.

This is the detail from that KEK update Windows Secure boot certificate - Microsoft
John C 5 Reputation points

2026-05-21T12:48:23.4533333+00:00

Thanks Neil. My secure boot certificate is now up to date since I booted the second Windows 11 partition on my PC. I only use my main Windows partition, so the second one is just there currently as a test bed / backup. I can't remember when I last installed Windows 11 on the second partition but my guess is that it does have the KEK update.
Gl0wSticks 0 Reputation points

2026-05-22T05:12:30.8866667+00:00

@Neil D

I have this under other updates.

I don't really want to run updates/pause updates because that potentially crashes my computer... MY PC very vulnerable right now, and messing with graphic drivers.. since the update...

When microsoft going to release a fix so I can continue troubleshooting the damage.. 7 days of this...
Neil D 33,130 Reputation points Volunteer Moderator

2026-05-22T08:30:27.48+00:00

@Gl0wSticks the only info I have is the link I posted previously. That details a known problem with the update and Microsoft's workaround.

You may have to wait until the update in June if the workaround doesn't work for you.

It could be worth giving details of your problem via the Feedback Hub in windows. (winkey+F)
Gl0wSticks 0 Reputation points

2026-05-24T04:28:38.5133333+00:00

@Neil D

MY PC keeps failing to boot sometimes and going into repair, and failing, brought to blue screen with continue, troubleshoot etc..

Windows update caused all this bs to happen..... Waiting for June is crazy, they nee to launch something asap. Billion dollar company wtf.

They likely don't want to admit other possible failures that might have happened or they get screwed.
Neil D 33,130 Reputation points Volunteer Moderator

2026-05-24T14:40:54.0433333+00:00

@Gl0wSticks The only other thing I can offer is the option under recovery to reinstall windows.

Settings > System > Fix problems using windows update, select Reinstall now. Hopefully they will issue something other than just the detailed workaround.
John C 5 Reputation points

2026-05-24T15:16:25.8833333+00:00

I have done the "Fix problems using Windows update" several times. My best guess is that KB5089549 failing can be due to BIOS problems which can not be fixed with any Windows re-install. My last step was to install the latest BIOS update for my Beelink GTi13 mini-pc. Beelink support also sent me an update for Intel CSME in the BIOS. That BIOS update is failing for me but I hope for an answer from Beelink within the next few days. I know that the Intel CSME version checker tells me that my system is vunerable and the CSME should be updated. Once I hopefully get the CSME updated in my BIOS I will try KB5089549 again.
Neil D 33,130 Reputation points Volunteer Moderator

2026-05-24T16:16:01.07+00:00

Sorry John. My last comment is specifically aimed at Gl0wSticks.

I've edited the comment now.
John C 5 Reputation points

2026-05-24T16:49:07.89+00:00

Thanks Neil D. I did think your last comment was aimed at GlowSticks. However, I did start this question page and I feel my reply to your last suggestion may be relevant to others. Before starting this question page I had done a lot of searching and I have seen others commenting about re-installing Windows not helping with KB5089549. Since KB5089549 is a low level security update that needs to be happy with the BIOS contents, I feel my strategy of updating my BIOS security is at least worth trying.

3 answers

Your answer

Neil D 33,130 Reputation points Volunteer Moderator

2026-05-19T14:07:23.1133333+00:00

This update has been problematic for a few users.

It took me a few days to get it to download and install. I restarted windows a few times during that time then checked for updates again.

Eventually it downloaded and installed but was very slow to do so.
John C 5 Reputation points

2026-05-19T14:21:26.5066667+00:00

Thanks Neil. I will just keep an eye on it for a while and see what happens. This all started for me with KB5087051 failing weeks ago. It got to the point for me that I paused updates for 5 weeks. Once the updates resumed I found I had KB5087051 and KB5089549 failing to install. Since KB5087051 did finally install yesterday, I have some hope that KB5089549 might eventually install too.
Gl0wSticks 0 Reputation points

2026-05-20T09:37:40.3633333+00:00

This has been going on for like 5 days for me. The first time I tried to download/install these my PC crashed and ruined my NVidia drivers... I had flashing screens after booting windows.. I had to use DDU in safemode to fix all that. Sometimes while trying to retry these or pause the updates me PC will crash, so I'm not attempting these anymore. Until some type of fix comes out. (These are both being reported not installing, google it)

I've done a multitude of troubleshooting, and nothing seems to fix. I heard the EFI lacks space, but I'm not messing with that. I've done SFC, DSIM, do x measure then try the updates again. Nothing works, also system restore only shows the May 17th or something ONLY option..

My computer is running terrible slow for games now, displays 60 FPS for example but is not 60 FPS. Mouse lag, desktop is in general is slower. NOT unusable but it's giving me migraines using the PC the past 5 days.
Neil D 33,130 Reputation points Volunteer Moderator

2026-05-20T10:03:10.1766667+00:00

There is a known issue. The KB detail includes a workaround May 12th KB5089549 update - Microsoft although it may be worth waiting for next months update or if a fix appears in windows update.
John C 5 Reputation points

2026-05-21T02:34:18.2633333+00:00

Thanks Neil, I'm not sure if you were replying to Gl0wSticks or me. In another comment here I have said that I was already aware of the known issue. It is, unfortunately, not relevant to my system. I have two EFI partitions, both with plenty of space.

Yesterday I updated my Beelink mini-pc to latest BIOS. Trying the update after that did not work.

My feeling has been that the failure is something to do with secure boot keys/certificates. One reason I wanted to update my PC BIOS is that Windows was saying that secure boot was enabled but it was flagging a certificate expiration problem. Clicking on the link with problem takes me to a lot of information, including, certificates should be updated with certain Windows updates.

Tonight I had an idea - boot from my second Windows 11 partition and try KB5089549 there. I tried manual install which did not complete but I was interested to see that Windows was reporting "secure boot enabled and all required certificates installed". So, I rebooted my main Windows 11 and for the first time ever I see "secure boot enabled and all required certificates installed" which kind of makes sense because the cetrificates are in the BIOS, yes? That is why I wanted to try KB5089549 manually from my second, fresh install of Windows 11 - if that could update the Windows secure boot certificates, then surely problem solved?

So, my next step will be to reboot my main Windows 11 and see what happens. Perhaps with secure boot certificates in good condition, KB5089549 will no longer have a problem....
Neil D 33,130 Reputation points Volunteer Moderator

2026-05-21T08:10:44.9033333+00:00

@John C the comment was for @Gl0wSticks and it does have a reference to secure boot in the KB info page.

Did you receive the KEK update? It should be shown in Update history under Other updates.
John C 5 Reputation points

2026-05-21T11:38:03.6266667+00:00

Thanks Neil. I have not seen the KEK update. My Other Updates go back to 8th Dec 2025 and only show Windows Malicious Software Removal Tool updates.
Neil D 33,130 Reputation points Volunteer Moderator

2026-05-21T12:32:37.6733333+00:00

@John C the update should be offered when the telemetry from the device shows it is ready. I'm not sure how you would check manually but it would include an up to date bios from the manufacturer.

This is the detail from that KEK update Windows Secure boot certificate - Microsoft
John C 5 Reputation points

2026-05-21T12:48:23.4533333+00:00

Thanks Neil. My secure boot certificate is now up to date since I booted the second Windows 11 partition on my PC. I only use my main Windows partition, so the second one is just there currently as a test bed / backup. I can't remember when I last installed Windows 11 on the second partition but my guess is that it does have the KEK update.
Gl0wSticks 0 Reputation points

2026-05-22T05:12:30.8866667+00:00

@Neil D

I have this under other updates.

I don't really want to run updates/pause updates because that potentially crashes my computer... MY PC very vulnerable right now, and messing with graphic drivers.. since the update...

When microsoft going to release a fix so I can continue troubleshooting the damage.. 7 days of this...
Neil D 33,130 Reputation points Volunteer Moderator

2026-05-22T08:30:27.48+00:00

@Gl0wSticks the only info I have is the link I posted previously. That details a known problem with the update and Microsoft's workaround.

You may have to wait until the update in June if the workaround doesn't work for you.

It could be worth giving details of your problem via the Feedback Hub in windows. (winkey+F)
Gl0wSticks 0 Reputation points

2026-05-24T04:28:38.5133333+00:00

@Neil D

MY PC keeps failing to boot sometimes and going into repair, and failing, brought to blue screen with continue, troubleshoot etc..

Windows update caused all this bs to happen..... Waiting for June is crazy, they nee to launch something asap. Billion dollar company wtf.

They likely don't want to admit other possible failures that might have happened or they get screwed.
Neil D 33,130 Reputation points Volunteer Moderator

2026-05-24T14:40:54.0433333+00:00

@Gl0wSticks The only other thing I can offer is the option under recovery to reinstall windows.

Settings > System > Fix problems using windows update, select Reinstall now. Hopefully they will issue something other than just the detailed workaround.
John C 5 Reputation points

2026-05-24T15:16:25.8833333+00:00

I have done the "Fix problems using Windows update" several times. My best guess is that KB5089549 failing can be due to BIOS problems which can not be fixed with any Windows re-install. My last step was to install the latest BIOS update for my Beelink GTi13 mini-pc. Beelink support also sent me an update for Intel CSME in the BIOS. That BIOS update is failing for me but I hope for an answer from Beelink within the next few days. I know that the Intel CSME version checker tells me that my system is vunerable and the CSME should be updated. Once I hopefully get the CSME updated in my BIOS I will try KB5089549 again.
Neil D 33,130 Reputation points Volunteer Moderator

2026-05-24T16:16:01.07+00:00

Sorry John. My last comment is specifically aimed at Gl0wSticks.

I've edited the comment now.
John C 5 Reputation points

2026-05-24T16:49:07.89+00:00

Thanks Neil D. I did think your last comment was aimed at GlowSticks. However, I did start this question page and I feel my reply to your last suggestion may be relevant to others. Before starting this question page I had done a lot of searching and I have seen others commenting about re-installing Windows not helping with KB5089549. Since KB5089549 is a low level security update that needs to be happy with the BIOS contents, I feel my strategy of updating my BIOS security is at least worth trying.

Answer 1

Kevin Quail 5

It says post answer. There is no answer. It's a Microsoft problem. I tried downloading it from the Microsoft update site directly and it still didn't install it got to 98% and then I got the same message. I tried adjusting my EFI partition or looking at it and I have 161 MB of space in the EFI partition so that's not it. I'd say just wait until the June update comes out because otherwise it seems to me it's a waste of time. I mean this started in January with that patch and has continued month after month. Too many engineers working on the cloud and not enough on the operating system. I already spent two weeks in March when my computer crashed twice. I'm just waiting till June because nothing anybody does works.

Gl0wSticks 0 Reputation points

2026-05-28T07:06:51.2066667+00:00

Apparently there was issues with HP laptops/desktops/etc. Booting them to bitlocker blue screen, and entering a key which I don't even know where to find this key. HOWEVER this never happened to me, I do have a 30L HP OMEN desktop, so I thought it might be the issue... But again it's not giving me bitlocker blue screen where I need to enter a key.

I tried to contact Microsoft live chat, and use QuickAccess program they have, and that wasn't even working. I asked them how long does this happen? They said frequently.. LOL

These updates not installing on my PC are causing permanent damage, and I'm tired of diagnosing my PC. Taking work hours away, and free time hours away. I've probably spent close to 50-60 hours trying to fix the issue, and nothing works, and the live chat is a miserable waste of time.

For me at least...

kb5087051 and kb5089549 are just giving me retry.. Pausing the updates or trying to install the updates has the potential to crash my PC "An error has occurred and your PC must restart", sometimes going into repair and not fixing anything.

They should be paying the people spending countless hours attempting to diagnose the problem, seeing as they don't do anything....... THEY caused the issue.

Answer 2

You may need to consider performing an In-place Upgrade via Windows 11 ISO. It will definitely help in resolving update errors. Performing this can repair broken operating system files while your personal files, settings and installed applications will not be removed.

Few things to check on the PC

Unplug all external peripherals except for the Mouse, Keyboard, and LAN cable before starting
Disable or uninstall any third-party Antivirus program to prevent it from interfering with the upgrade

https://learn.microsoft.com/en-us/answers/questions/4252110/how-to-run-in-place-upgrade-in-windows-11?forum=windows-all&referrer=answers

Answer 3

John DeV 164.1K Independent Advisor

Hi, good day!

Please let me know if you have tried the methods below.

Make sure Windows Update and Background Intelligent Transfer services are available and running. Press Windows key+R to open Run then type: services.msc Press Enter to open Services app Double-click Background Intelligent Transfer Service. If the Startup status lists Stopped, click Start and then click OK. If the status is Running, right click then select Restart Double-click Windows Update. If the Startup status lists Stopped, click Start and then click OK. If the status is Running, right click then select Restart
Reset Windows Update components manually https://www.elevenforum.com/t/reset-windows-update-in-windows-11.3808/
Here's a direct download link of KB5089549 from Microsoft Update Catalog. Download and install the update manually. https://catalog.sf.dl.delivery.mp.microsoft.com/filestreamingservice/files/53914338-2058-4b75-95a6-6d674648107c/public/windows11.0-kb5089549-x64_9a542b5813b003374532dceeba49b7e07c3fc2fb.msu

I look forward to receiving your update and I'm willing to collaborate with you till we resolve the issue. Do keep me informed by clicking "Add comment" below instead of Yes or No button.

Standard Disclaimer: This is a non-Microsoft website. The page appears to be providing accurate, safe information. Watch out for ads on the site that may advertise products frequently classified as a PUP (Potentially Unwanted Products). Thoroughly research any product advertised on the site before you decide to download and install it.

John C 5 Reputation points

2026-05-19T03:10:08.4466667+00:00

Many thanks for your reply.

I tried your suggestions.

For the Reset Windows Update components manually I was instructed to restart my PC. The PC installed some updates and restarted okay, though I did not have networking. I asked Windows to reset my ethernet adapters and restarted again. On restart I had my networking back again. At this point I noticed that the Reset Windows Update reboot did actually install KB5087051 which is the update that started the failed update problem weeks ago.

So, I downloaded the KB5089549 and ran the manual install. No error messages there, a 100% completion and I was asked to restart.

On restart I saw the same problem I have been seeing with this update. I see an "Installing updates" message that gets to 30% complete and then the PC restarts to the "kmode exception not handled", then to the usual auto repair, uninstalling update and reboot.
John DeV 164.1K Reputation points Independent Advisor

2026-05-19T06:17:11.59+00:00

I learned from reading some articles online that Microsoft has mitigated the issue through Known Issue Rollback (KIR), and the solution is applied automatically. Restarting your PC a few times may help the update take effect faster before checking for updates again.
John C 5 Reputation points

2026-05-19T13:51:18.3333333+00:00

I have already read about that KIR before posting here. That KIR is related to errors such as 0x800f0922 and users running out of available space on EFI partition. After reading the KIR I did check my EFI Partition. I have two of them and niether is running out of space. In any case, I did increase the size of the smaller one with AOMEI Partition Assitant.

Thanks, but I hold no hope of that KIR helping me.

Share via

KB5089549 Install error - 0x800f0845

3 answers

Your answer