This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(281.6, 88%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJC%3C/text%3E%3C/svg%3E)
Beelink GTi13 mini-pc
Processor 13th Gen Intel(R) Core(TM) i9-13900HK (2.60 GHz)
Installed RAM 96.0 GB (95.8 GB usable)
System type 64-bit operating system, x64-based processor
Edition Windows 11 Pro
Version 25H2
Installed on 17/05/2026
OS build 26200.7840
Experience Windows Feature Experience Pack 1000.26100.291.0
I have tried every bit of advice I could find online.
Both KB5089549 and KB5087051 have been failing install with a "kmode exception not handled" error leading to "Your device ran in to a problem" and an auto repair. The repair has worked every time so far but Windows update still want to install these two updates.
I thought my problem was due to my Beelink not having Secure Boot enabled, so I have now enabled that. I also had a good hope of setting the Beelink TPM Device Selection from dTPM to PTT, because the GTi13 does not have a physicak TPM chip, but still KB5089549 fails.
I have checked EFI partition size ( my PC is dual Windows 11 boot and has two ). Both seem to have plenty of space.
I have run the following;
SC config trustedinstaller start=auto
net stop bits
net stop wuauserv
net stop msiserver
net stop cryptsvc
net stop appidsvc
Ren %Systemroot%\SoftwareDistribution SoftwareDistribution.old
Ren %Systemroot%\System32\catroot2 catroot2.old
regsvr32.exe /s atl.dll
regsvr32.exe /s urlmon.dll
regsvr32.exe /s mshtml.dll
netsh winsock reset
netsh winsock reset proxy
rundll32.exe pnpclean.dll,RunDLL_PnpClean /DRIVERS /MAXCLEAN
dism /Online /Cleanup-image /ScanHealth
dism /Online /Cleanup-image /CheckHealth
dism /Online /Cleanup-image /RestoreHealth
dism /Online /Cleanup-image /StartComponentCleanup
Sfc /ScanNow
net start bits
net start wuauserv
net start msiserver
net start cryptsvc
net start appidsvc
I have tried installing KB5089549 with real time protection off.
I have tried installing Windows 11, version 25H2 (repair version).
Nothing I have tried has changed how KB5089549 fails.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(204.8, 96%, 29%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3END%3C/text%3E%3C/svg%3E)
This update has been problematic for a few users.
It took me a few days to get it to download and install. I restarted windows a few times during that time then checked for updates again.
Eventually it downloaded and installed but was very slow to do so.
Thanks Neil. I will just keep an eye on it for a while and see what happens. This all started for me with KB5087051 failing weeks ago. It got to the point for me that I paused updates for 5 weeks. Once the updates resumed I found I had KB5087051 and KB5089549 failing to install. Since KB5087051 did finally install yesterday, I have some hope that KB5089549 might eventually install too.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(3.2, 43%, 10%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EG%3C/text%3E%3C/svg%3E)
This has been going on for like 5 days for me. The first time I tried to download/install these my PC crashed and ruined my NVidia drivers... I had flashing screens after booting windows.. I had to use DDU in safemode to fix all that. Sometimes while trying to retry these or pause the updates me PC will crash, so I'm not attempting these anymore. Until some type of fix comes out. (These are both being reported not installing, google it)
I've done a multitude of troubleshooting, and nothing seems to fix. I heard the EFI lacks space, but I'm not messing with that. I've done SFC, DSIM, do x measure then try the updates again. Nothing works, also system restore only shows the May 17th or something ONLY option..
My computer is running terrible slow for games now, displays 60 FPS for example but is not 60 FPS. Mouse lag, desktop is in general is slower. NOT unusable but it's giving me migraines using the PC the past 5 days.
There is a known issue. The KB detail includes a workaround May 12th KB5089549 update - Microsoft although it may be worth waiting for next months update or if a fix appears in windows update.
Thanks Neil, I'm not sure if you were replying to Gl0wSticks or me. In another comment here I have said that I was already aware of the known issue. It is, unfortunately, not relevant to my system. I have two EFI partitions, both with plenty of space.
Yesterday I updated my Beelink mini-pc to latest BIOS. Trying the update after that did not work.
My feeling has been that the failure is something to do with secure boot keys/certificates. One reason I wanted to update my PC BIOS is that Windows was saying that secure boot was enabled but it was flagging a certificate expiration problem. Clicking on the link with problem takes me to a lot of information, including, certificates should be updated with certain Windows updates.
Tonight I had an idea - boot from my second Windows 11 partition and try KB5089549 there. I tried manual install which did not complete but I was interested to see that Windows was reporting "secure boot enabled and all required certificates installed". So, I rebooted my main Windows 11 and for the first time ever I see "secure boot enabled and all required certificates installed" which kind of makes sense because the cetrificates are in the BIOS, yes? That is why I wanted to try KB5089549 manually from my second, fresh install of Windows 11 - if that could update the Windows secure boot certificates, then surely problem solved?
So, my next step will be to reboot my main Windows 11 and see what happens. Perhaps with secure boot certificates in good condition, KB5089549 will no longer have a problem....
@John C the comment was for @Gl0wSticks and it does have a reference to secure boot in the KB info page.
Did you receive the KEK update? It should be shown in Update history under Other updates.
Thanks Neil. I have not seen the KEK update. My Other Updates go back to 8th Dec 2025 and only show Windows Malicious Software Removal Tool updates.
@John C the update should be offered when the telemetry from the device shows it is ready. I'm not sure how you would check manually but it would include an up to date bios from the manufacturer.
This is the detail from that KEK update Windows Secure boot certificate - Microsoft
Thanks Neil. My secure boot certificate is now up to date since I booted the second Windows 11 partition on my PC. I only use my main Windows partition, so the second one is just there currently as a test bed / backup. I can't remember when I last installed Windows 11 on the second partition but my guess is that it does have the KEK update.
I have this under other updates.
I don't really want to run updates/pause updates because that potentially crashes my computer... MY PC very vulnerable right now, and messing with graphic drivers.. since the update...
When microsoft going to release a fix so I can continue troubleshooting the damage.. 7 days of this...
@Gl0wSticks the only info I have is the link I posted previously. That details a known problem with the update and Microsoft's workaround.
You may have to wait until the update in June if the workaround doesn't work for you.
It could be worth giving details of your problem via the Feedback Hub in windows. (winkey+F)
MY PC keeps failing to boot sometimes and going into repair, and failing, brought to blue screen with continue, troubleshoot etc..
Windows update caused all this bs to happen..... Waiting for June is crazy, they nee to launch something asap. Billion dollar company wtf.
They likely don't want to admit other possible failures that might have happened or they get screwed.
@Gl0wSticks The only other thing I can offer is the option under recovery to reinstall windows.
Settings > System > Fix problems using windows update, select Reinstall now. Hopefully they will issue something other than just the detailed workaround.
I have done the "Fix problems using Windows update" several times. My best guess is that KB5089549 failing can be due to BIOS problems which can not be fixed with any Windows re-install. My last step was to install the latest BIOS update for my Beelink GTi13 mini-pc. Beelink support also sent me an update for Intel CSME in the BIOS. That BIOS update is failing for me but I hope for an answer from Beelink within the next few days. I know that the Intel CSME version checker tells me that my system is vunerable and the CSME should be updated. Once I hopefully get the CSME updated in my BIOS I will try KB5089549 again.
Sorry John. My last comment is specifically aimed at Gl0wSticks.
I've edited the comment now.
Thanks Neil D. I did think your last comment was aimed at GlowSticks. However, I did start this question page and I feel my reply to your last suggestion may be relevant to others. Before starting this question page I had done a lot of searching and I have seen others commenting about re-installing Windows not helping with KB5089549. Since KB5089549 is a low level security update that needs to be happy with the BIOS contents, I feel my strategy of updating my BIOS security is at least worth trying.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(89.60000000000001, 18%, 18%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJD%3C/text%3E%3C/svg%3E)
You may need to consider performing an In-place Upgrade via Windows 11 ISO. It will definitely help in resolving update errors. Performing this can repair broken operating system files while your personal files, settings and installed applications will not be removed.
Few things to check on the PC
Hi, good day!
Please let me know if you have tried the methods below.
I look forward to receiving your update and I'm willing to collaborate with you till we resolve the issue. Do keep me informed by clicking "Add comment" below instead of Yes or No button.
Standard Disclaimer: This is a non-Microsoft website. The page appears to be providing accurate, safe information. Watch out for ads on the site that may advertise products frequently classified as a PUP (Potentially Unwanted Products). Thoroughly research any product advertised on the site before you decide to download and install it.
Many thanks for your reply.
I tried your suggestions.
For the Reset Windows Update components manually I was instructed to restart my PC. The PC installed some updates and restarted okay, though I did not have networking. I asked Windows to reset my ethernet adapters and restarted again. On restart I had my networking back again. At this point I noticed that the Reset Windows Update reboot did actually install KB5087051 which is the update that started the failed update problem weeks ago.
So, I downloaded the KB5089549 and ran the manual install. No error messages there, a 100% completion and I was asked to restart.
On restart I saw the same problem I have been seeing with this update. I see an "Installing updates" message that gets to 30% complete and then the PC restarts to the "kmode exception not handled", then to the usual auto repair, uninstalling update and reboot.
I learned from reading some articles online that Microsoft has mitigated the issue through Known Issue Rollback (KIR), and the solution is applied automatically. Restarting your PC a few times may help the update take effect faster before checking for updates again.
I have already read about that KIR before posting here. That KIR is related to errors such as 0x800f0922 and users running out of available space on EFI partition. After reading the KIR I did check my EFI Partition. I have two of them and niether is running out of space. In any case, I did increase the size of the smaller one with AOMEI Partition Assitant.
Thanks, but I hold no hope of that KIR helping me.
