How can I resolve the update issue?

Question

Answer 1

Hi Mahmoud,

Thank you for posting your question here in Microsoft Q&A Forum. I understand that your computer can’t boot Windows. Your BIOS/UEFI settings changed, so Secure Boot and the boot order are blocking Windows Boot Manager.

Here's what you can do to fix it. Reset the BIOS to defaults, then disable CSM, set the boot mode to UEFI, disable Secure Boot, and set Windows Boot Manager as the first boot device before saving and restarting the system.

Let me know if you have more questions, I'll be here to help.

Thanks,

Jobelle

Answer 2

The issue shown in the photos is no longer a simple Windows Update problem: the system cannot boot Windows (“Default Boot Device Missing or Boot Failed” and “Windows Boot Manager has been blocked by the current security policy”). To get back to a working Windows 11 installation, use recovery/repair options rather than normal updating.

Follow an approach similar to what is recommended when updates or repairs leave the system unbootable:

1. Boot into the Windows Recovery Environment (WinRE)
   • Power on the device and as soon as the logo appears, hold the power button to force it off.
   • Repeat this power‑on / forced‑off cycle three times.
   • On the third start, Windows should show “Preparing Automatic Repair” and then “Advanced options”.
   • Choose Advanced options.
2. Try System Restore or Startup Repair
   • In WinRE, select Troubleshoot > Advanced options.
   • First try Startup Repair to automatically fix boot problems.
   • If that does not work but a restore point exists, choose System Restore, pick a restore point from before the failed update, and complete the restore.
3. If repair options fail, reset or clean‑install Windows
   • Still in Troubleshoot, choose Reset this PC.
   • Select Keep my files if possible, then follow the prompts for a Local reinstall.
   • If Reset fails or the device cannot reach WinRE, perform a clean installation of Windows 11 using installation media:
     • From another PC, go to the Windows 11 software download page and create installation media on a USB drive.
     • Boot the affected PC from that USB and perform a clean install. This removes apps and may remove data, so back up anything accessible first.
4. After Windows is working again, run Windows Update normally
   • Open Settings > Windows Update and install all available updates until none remain.
   • If update problems reappear, use the documented Windows Update troubleshooting steps (checking connectivity, clearing the update cache, running DISM and SFC, etc.).

If the device is a Surface or OEM laptop and still refuses to boot even from USB, use the manufacturer’s recovery image and instructions (for example, Surface recovery image and USB recovery drive creation) to fully reimage the device.

---

References:

• Troubleshoot problems updating Windows
• Surface Pro 8 Not Updating to 24H2 - Microsoft Q&A
• New laptop MSI won't go past update installation at first boot - Microsoft Q&A