Microsoft patches the patch that can brick Surface Hub v1 screens

Out-of-band getting out of hand

Microsoft has released an out-of-band update to deal with a Surface Hub problem introduced with June's Patch Tuesday fixes.

The problem arrived in KB5060533 for Windows 10 21H2 and 22H2 and left several Surface Hub v1 devices stuck with a start failure. On June 11, Microsoft paused the update for Surface Hub v1 to stop the problem spreading, and a week later issued a patch to deal with it.

The issue does not affect the Surface Hub 2S and 3, but afflicted Surface Hub v1 devices would fail to start and show the error: "Secure Boot Violation: Invalid signature detected. Check Secure Boot Policy in Setup."

Though Microsoft acted swiftly in pausing the update, questions remain over how such a critical flaw made it through testing.

To make matters worse, it doesn't appear that there is a reliable workaround. Microsoft's note on the subject says: "We are working on a resolution to recover the limited number of Surface Hub v1 devices that were impacted by this issue and are unable to start. We will provide more information when it is available."

Some users have reported success using the disk re-imaging tool, but the approach appears somewhat hit-and-miss, according to posts on social media. Others have reported that the Surface team is investigating whether tools used in manufacturing can help to recover devices. The Register contacted Microsoft to confirm this, and will update this piece should the company respond.

Out-of-band has been getting out of hand in recent times, as Microsoft has scrambled to deal with a relentless succession of issues introduced in its patches. At least most Windows 10 users, alongside Surface Hub v1 customers, won't have to worry about the company accidentally breaking their systems once support ends in October.

Enterprise IT administrators are understandably concerned about the impending end of support. Still, at least it'll mean an end to angry helpdesk tickets after the expensive screen in the boardroom is inadvertently borked by one of Microsoft's "security and quality" updates.

El Reg asked Microsoft what testing it does on its own devices regarding updates, and what advice it had for users faced with a big black brick now hanging on the wall. We'll update this piece if the company responds. ®