The SECURE_KERNEL_ERROR with the stop code 0x18B indicates a critical failure in the secure kernel component of Windows 11, which is responsible for maintaining system security during sensitive operations. This error often leads to a Blue Screen of Death (BSOD), disrupting system stability and workflow. Recent Windows 11 updates, particularly versions 24H2, including KB5055523 and KB5053656, have triggered this error for many users.

Microsoft has acknowledged the issue and deployed an automatic Known Issue Rollback (KIR) to revert problematic changes causing the BSOD. Below are detailed steps to apply this fix, along with additional troubleshooting methods to resolve or mitigate the error on both personal and enterprise devices.

Apply the Automatic Known Issue Rollback (KIR) Fix

Microsoft’s KIR feature automatically reverses non-security updates that introduce critical problems like the SECURE_KERNEL_ERROR. This fix is pushed to most personal and unmanaged devices without user intervention but requires the device to be online and restarted to take effect promptly.

Connect your Windows 11 device to the internet to allow it to receive updates from Microsoft servers.

Restart your PC. Restarting helps the system detect and apply the KIR update faster.

Open Settings > Windows Update and click Check for updates. Repeat this process several times, rebooting your PC after each check, to accelerate the rollout of the fix.

After the fix is applied, verify that the BSOD no longer occurs.

Deploy the Fix in Enterprise or Managed Environments

In corporate or managed environments where devices are controlled via Group Policy, IT administrators must manually deploy the Known Issue Rollback to affected machines.

Download the appropriate Known Issue Rollback Group Policy package for Windows 11 24H2 from Microsoft’s official documentation or support website.

Open the Group Policy Editor on the domain controller or local machine by running gpedit.msc.

Navigate to Computer Configuration > Administrative Templates.

Install and configure the Known Issue Rollback policy targeting the affected Windows version.

Deploy the policy across the network and restart all targeted devices to apply the changes.

Update Device Drivers

Outdated or incompatible device drivers can exacerbate kernel errors. Ensuring all drivers are up to date can reduce the risk of BSODs.

Press Windows + X and select Device Manager.

Expand each hardware category, right-click on devices, and select Update driver.

Choose Search automatically for drivers to let Windows find and install the latest available versions.

For critical components such as graphics cards and storage controllers, visit the manufacturer’s website to download and install the most recent drivers manually if Windows cannot find updates.

Restart your PC after updating drivers to ensure changes take effect.

Uninstall Problematic Updates Manually

If the BSOD started after installing a specific update and the automatic rollback is not yet applied, uninstalling the update may provide temporary relief.

Open Settings > Windows Update > Update history.

Click Uninstall updates.

Select the problematic update (e.g., KB5055523 or KB5053656) and click Uninstall.

Restart your PC and check if the BSOD issue is resolved.

Check for Firmware Updates

Hardware manufacturers sometimes release firmware updates to fix compatibility issues with Windows updates.

Identify your device’s make and model, including motherboard and peripherals.

Visit the manufacturer’s official website and locate the support or downloads section.

Download and install any available firmware or BIOS updates following the manufacturer’s instructions carefully.

Restart your PC after applying firmware updates.

Run System File and Malware Scans

Corrupted system files or malware infections can cause kernel errors. Running system integrity checks and malware scans helps identify and fix such issues.

Open Command Prompt as an administrator by pressing Windows + S, typing Cmd, right-clicking it, and selecting Run as administrator.

Run the following commands one after another, pressing Enter after each:


DISM /Online /Cleanup-Image /CheckHealth
DISM /Online /Cleanup-Image /ScanHealth
DISM /Online /Cleanup-Image /RestoreHealth
sfc /scannow

After the scans complete, restart your PC.

Open Windows Security > Virus & threat protection.

select Scan options, choose Full scan, and click Scan now to check for malware.

Remove any detected threats and restart your PC.

Perform a Clean Boot

Conflicting third-party applications or services can trigger the SECURE_KERNEL_ERROR. A clean boot disables non-essential software to isolate the cause.

Press Windows + R, type msconfig, and press Enter.

In the System Configuration window, go to the Services tab, check Hide all Microsoft services, and click Disable all.

Switch to the Startup tab and click Open Task Manager.

Disable all startup items listed as enabled by right-clicking on each and selecting Disable.

Close Task Manager, click Apply and OK in System Configuration, then restart your PC.

Observe if the BSOD persists. If it does not, re-enable services and startup items one by one, restarting after each, to identify the problematic software.

Perform an In-Place Upgrade

If all else fails, repairing Windows 11 through an in-place upgrade reinstalls system files without deleting personal data or installed applications, which can resolve deep system issues causing the BSOD.

Download the official Windows 11 ISO from Microsoft’s website.

Mount the ISO by double-clicking it, then run setup.exe.

Follow the on-screen prompts, accept the license terms, and ensure the option to keep personal files and apps is selected.

Proceed with the installation and wait for it to complete, which may take 45 to 90 minutes.

After completion, verify if the SECURE_KERNEL_ERROR no longer occurs.

Applying Microsoft’s Known Issue Rollback is the most straightforward solution to fix the 0x18B SECURE_KERNEL_ERROR caused by recent Windows 11 updates. Complementing this with driver updates, system scans, and, if necessary, an in-place upgrade ensures your system regains stability and resumes normal operation.