Rufus 4.15, released on June 30, 2026, makes it easier than ever to create a bootable Windows 11 25H2 USB drive, thanks to a new “Quality of Life” (QoL) tweaks bundle that strips out unwanted bloat and adds privacy controls with a single checkbox. The update also introduces support for Microsoft’s upcoming Secure Boot certificate transition, giving users a head start on preparing installation media for next-generation firmware.
The latest version of the popular USB creation tool arrives just as Microsoft rolls out Windows 11 version 25H2, the 2025 Update. Rufus 4.15 automatically detects the new ISO and presents appropriate customization options, eliminating the guesswork for users who want a clean, tailored installation.
What’s New in Rufus 4.15
Rufus 4.15 is a maintenance release that deepens compatibility with Windows 11 25H2 and adds two standout features: the QoL improvements bundle and the ability to sign bootloaders with the “Windows CA 2023” certificate.
Quality of Life bundle – The headline addition consolidates six common tweaks into a single toggle. When enabled, Rufus will:
- Remove OneDrive, Outlook, and Teams from the default install.
- Disable Copilot, Fast Startup, Start menu ads, and news content.
- Skip the first-run dialog in Microsoft Edge.
- Adjust Start menu defaults for a cleaner layout.
Previously, achieving these results required multiple manual steps or separate scripts. Now, a single checkmark applies them during USB creation.
Windows CA 2023 bootloaders – Aimed at enterprises and enthusiasts preparing for future Secure Boot policies, this option requires Rufus 4.10 or later and a Windows 11 25H2 ISO. It replaces the media’s bootloaders with versions signed by Microsoft’s newer certificate, a step that may become mandatory on some PCs as old certificates are deprecated. Rufus warns that Windows 11 24H2 ISOs will not work with this option.
Other time-savers remain, including the ability to bypass TPM 2.0, Secure Boot, and 4GB RAM requirements, remove the Microsoft account online sign-in requirement, and preconfigure a local user account and regional settings—all from a single dialog after pressing Start.
A Closer Look at the Customization Options
When Rufus detects a Windows 11 25H2 ISO, it presents a “Windows User Experience” dialog with up to a dozen toggles. Not all appear for every image; Rufus tailors the list based on the detected version.
For the new QoL bundle, users simply tick one box and gain six changes in one go. This bundling makes it easier to create an installer that feels more like a clean, bloat-free Windows 11 edition—no more manually uninstalling apps or flipping privacy toggles post-install.
The CA 2023 bootloader option is more niche but critical for certain business laptops and self-built PCs that have already received firmware updates to trust only the newer certificate. Without it, a standard USB might be blocked by Secure Boot, leaving users with a “security violation” error.
Notably, the online Microsoft account removal option now works best when the target PC stays offline during account creation. If Windows Setup detects an internet connection, it will still default to Microsoft account sign-in, so Rufus’s workaround is only part of the puzzle.
Who Benefits and How
Home users upgrading or reinstalling Windows 11 25H2 gain the most immediate advantage. The QoL bundle automates the tedious post-install cleanup that many perform after every fresh install. It also makes offline, local-account setups more straightforward—ideal for family PCs or devices that don’t need cloud sync.
System administrators can use the CA 2023 option to future-proof deployment media. As organizations adopt newer hardware or update firmware, having installer USBs ready for the certificate transition avoids help-desk calls. The one-click bundling also standardizes the removal of consumer-oriented apps in enterprise images without complex scripting.
Power users and tinkerers who build their own PCs or repurpose older hardware will appreciate the preserved hardware requirement bypasses. However, Rufus makes clear that bypassing TPM 2.0 and Secure Boot is a workaround, not a supported configuration—users risk missing future updates or encountering driver issues.
Developers testing Windows 11 25H2 in virtual machines or on bare-metal rigs can use the same USB to quickly spin up a clean, pre-tweaked environment, skipping repetition.
How We Got Here
Rufus has been the go-to tool for creating bootable USBs since its debut over a decade ago. Its ability to work around Windows 11’s strict hardware requirements made it essential when Microsoft first introduced TPM 2.0 and Secure Boot mandates in 2021. Since then, each Rufus release has layered on new customization capabilities, from local-account restoration to BitLocker suppression.
Version 4.10 (released earlier in 2026) laid the groundwork for the CA 2023 bootloader support, but the QoL bundle is entirely new to 4.15. The shift toward bundling common tweaks reflects a maturing user base that knows what it wants from a clean Windows install—and expects a tool as powerful as Rufus to deliver it without hassle.
Microsoft’s release of Windows 11 25H2 brings its own changes under the hood, but the ISO format remains constant, allowing Rufus to maintain its reliable conversion pipeline. At the same time, Microsoft continues to nudge users toward online accounts and integrated services, making Rufus’s offline and privacy-focused options as relevant as ever.
What to Do Now
If you plan to install Windows 11 25H2—or need a reliable USB toolkit—download Rufus 4.15 directly from rufus.ie. The portable executable requires no installation; just run it as administrator.
Before writing any USB, back up its contents. Rufus will erase the entire drive. Then:
- Get the right ISO: Use Microsoft’s official Download Windows 11 page. As of July 2026, the 25H2 image is the default option. Avoid third-party modified ISOs.
- Select the correct partition scheme: For any modern PC with UEFI firmware, choose GPT (not MBR). Rufus automatically sets “UEFI (non CSM)” as the target system.
- Pick your customizations wisely: Press Start and review the Windows User Experience dialog. If you want a bloat-free, local-account setup with privacy defaults, enable the QoL bundle. Do not enable options you don’t understand—especially “Windows CA 2023” unless you know your target PC requires it.
- Write and verify: After writing completes, safely eject the USB. Boot the target PC from it via the one-time boot menu (F12 on many systems) and confirm that Windows Setup loads correctly.
For users who want Rufus to download the ISO directly, enable “Check for updates” in the app settings, restart Rufus, and use the Download button that appears in place of the Select button. This fetches the ISO from Microsoft’s servers via a signed PowerShell script.
Should you encounter a Secure Boot violation on boot, re-create the media with the latest Rufus and ensure you are using a genuine, up-to-date Windows 11 25H2 ISO. Temporarily disabling Secure Boot is a last resort; record the original setting and re-enable it after installation.
After installation, you can return the USB to normal storage by selecting “Non bootable” in Rufus and reformatting.
Outlook
Rufus 4.15 solidifies the tool’s role as an unofficial control panel for Windows 11 installations. As Microsoft tightens its hardware and security requirements—and as the CA 2023 certificate transition progresses—expect future Rufus releases to refine these customization bundles even further. The QoL bundle is likely to grow, adding more user-requested tweaks while keeping the interface straightforward. For now, having a single-checkbox path to a cleaner, more private Windows 11 25H2 install is a welcome time-saver for anyone who’s ever sighed at a fresh desktop cluttered with unwanted apps.