Question

Your organization uses Windows Autopatch to manage quality updates for a fleet of Windows 11 Enterprise devices. Security wants to reduce the number of update-related reboots by enabling Hotpatch updates, which apply monthly security fixes without requiring a restart. Before assigning devices to a Hotpatch-enabled quality update policy, which prerequisite must the devices meet to actually receive hotpatch updates?

Accepted Answer

The devices must be running a Hotpatch-eligible Windows 11 Enterprise edition on a supported version with Virtualization-Based Security (VBS) enabled; Arm64 devices have the additional requirement that CHPE be disabled.

Answer

The devices must be enrolled in a Windows Insider Preview ring to receive early hotpatch builds.

Answer

The devices must have BitLocker suspended during each monthly hotpatch installation window.

Answer

The devices must be configured with a feature update deferral of at least 365 days in the update ring.