Microsoft's April 2025 security update, KB5055523, has introduced a significant issue affecting Windows Hello authentication on certain Windows 11 devices. Users have reported difficulties with facial recognition and PIN logins following the installation of this update.

Background

Windows Hello is a biometric authentication feature in Windows 11, allowing users to sign in using facial recognition or a PIN. The KB5055523 update, released on April 8, 2025, aimed to address various security vulnerabilities and improve system performance. However, it inadvertently caused authentication problems for some users.

The Issue

The problem primarily affects devices with specific security features enabled:

  • System Guard Secure Launch: Enhances system integrity by verifying the boot process.
  • Dynamic Root of Trust for Measurement (DRTM): Establishes a secure environment by measuring and verifying system components during startup.

After installing KB5055523 and performing a system reset (either through the "Push button reset" or "Reset this PC" options in Settings > System > Recovery), users may encounter error messages such as:

  • "Something happened and your PIN isn't available. Click to set up your PIN again."
  • "Sorry, something went wrong with face setup."

These errors prevent users from accessing their devices via Windows Hello authentication methods. (support.microsoft.com)

Technical Details

The issue arises due to an interaction between the KB5055523 update and the aforementioned security features. When these features are enabled after the update, the system's authentication process is disrupted during the reset procedure, leading to the reported errors. (support.microsoft.com)

Impact

This problem affects both client (Windows 11 24H2) and server (Windows Server 2025) platforms with the KB5055523 update installed. However, it is limited to devices where System Guard Secure Launch or DRTM is enabled after the update. Devices with these features enabled prior to the update or those with them disabled are not impacted. (support.microsoft.com)

Workarounds

Microsoft has provided the following workarounds for affected users:

  1. Re-enroll Windows Hello:
  • For PIN Users:
    • On the login screen, follow the "Set my PIN" prompt to re-enroll into Windows Hello.
  • For Facial Recognition Users:
    • Navigate to Settings > Accounts > Sign-in options > Facial recognition (Windows Hello), and select "Set up."
    • Follow the on-screen instructions to re-enroll your face.

These steps should restore Windows Hello functionality. (support.microsoft.com)

Conclusion

While the KB5055523 update was intended to enhance system security, it has inadvertently caused authentication issues for some users with specific security configurations. Microsoft is aware of the problem and has provided workarounds to mitigate the impact. Users experiencing these issues should follow the recommended steps to re-enroll their Windows Hello credentials.

Reference Links