Windows 11 24H2/25H2 | Server 2025 - Recovery Media Restore Fails with: The Local Security Authority cannot be contacted
Summary
Windows 11 24H2/25H2 | Server 2025 - Recovery Media Restore Fails with: The Local Security Authority cannot be contacted KB ID: 4885 Product: Veeam Agent for Microsoft Windows Published: 2026-07-28 Last Modified: 2026-07-28 Challenge When attempting to perform a restore using the Veeam Recovery Media, the restore fails while establishing the connection to the local VeeamAgent.exe process, and the following error occurs: The Local Security Authority cannot be contacted Because the failure occurs before a recovery operation can begin, it prevents restoring from any backup location, including local storage, a network shared folder or Veeam backup repository, and cloud repositories. Cause This issue occurs due to a regression introduced by the Microsoft June 2026 security update for Windows 11 and Windows Server 2025. The update changed the behavior of the Windows security subsystem (Local Security Authority and Schannel) within the Windows Recovery Environment (WinRE), on which the Veeam Recovery Media is based. As a result, the TLS handshake that secures the connection between the restore wizard and the local VeeamAgent.exe process cannot be completed.
What this means
In plain English
Windows 11 24H2/25H2 | Server 2025 - Recovery Media Restore Fails with: The Local Security Authority cannot be contacted KB ID: 4885 Product: Veeam Agent for Microsoft Windows Published: 2026-07-28 Last Modified: 2026-07-28 Challenge When attempting to perform a restore using the Veeam Recovery Media, the restore fails while establishing the connection to the local VeeamAgent.exe process, and the following error occurs: The Local Security Authority cannot be contacted Because the failure occurs before a recovery operation can begin, it prevents restoring from any backup location, including local storage, a network shared folder or Veeam…
Recommended action
Temporary workaround: Ensure that the Windows Assessment and Deployment Kit (Windows ADK) and the corresponding Windows PE add-on are installed on the machine where the Veeam Recovery Media will be recreated. Create the following registry value on the machine where Veeam Agent for Microsoft Windows is installed to configure it to build the Veeam Recovery Media using the Windows ADK: Location: HKEY_LOCAL_MACHINE\SOFTWARE\Veeam\Veeam Endpoint BackupValue Type: DWORD (32-Bit) ValueValue Name: ForceUseAdkForRecoveryMediaValue Data: 1 Alternatively, the registry value can be created using the following P… No fixed release is recorded in the parsed advisory, so treat these controls as temporary until the vendor confirms a patched release.
Rewritten locally from the scraped official advisory data above; no generative API is used. The vendor advisory is authoritative.
- 26100.8655
- 26200.8655
- 26100.33158
- 26200.8457
Official advisory · low-confidence parse· fetched 2 hours ago·verify at source
Fixed versions
No fixed release is recorded yet. That does not prove no patch exists — confirm against the vendor advisory.
Official advisory · low-confidence parse· fetched 2 hours ago·verify at source
Mitigation checklist
- Ensure that the Windows Assessment and Deployment Kit (Windows ADK) and the corresponding Windows PE add-on are installed on the machine where the Veeam Recovery Media will be recreated.
- Create the following registry value on the machine where Veeam Agent for Microsoft Windows is installed to configure it to build the Veeam Recovery Media using the Windows ADK: Location: HKEY_LOCAL_MACHINE\SOFTWARE\Veeam\Veeam Endpoint BackupValue Type: DWORD (32-Bit) ValueValue Name: ForceUseAdkForRecoveryMediaValue Data: 1 Alternatively, the registry value can be created using the following P…
Official advisory · low-confidence parse· fetched 2 hours ago·verify at source
Discussion(0)
No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.
Sign in to join the discussion.