Include the Arm64 CHPE change in a Windows hotpatch readiness review

Source facts

Microsoft requires Arm64 devices using hotpatch to disable compiled hybrid PE usage and restart. Hotpatch cannot service CHPE operating-system binaries. This CHPE step does not apply to AMD or Intel processors. Re-enabling CHPE after leaving hotpatch also requires a restart. VBS must also be enabled for a device to receive hotpatch offers. Microsoft Learn.

Applicability

Review Arm64 Windows clients proposed for Intune-managed hotpatch. This architecture-specific check supplements, rather than replaces, the current quality-update eligibility and baseline requirements.

DSE recommendation

Separate Arm64 preparation from the AMD/Intel device plan. Have the endpoint owner review the documented CHPE flag and schedule its restart before claiming readiness. Record the intended state if the device later leaves hotpatch, so the return path is not reduced to changing a cloud-policy toggle.

Verification

Use a representative Arm64 test device and inspect architecture, VBS state, CHPE configuration, and the completed restart. Then confirm the offered and installed update against the approved servicing plan. Preserve actual device evidence without treating a policy assignment as proof that every prerequisite is active. Review application behavior after the preparation change before extending it to more devices.

Official references

Microsoft Learn: Use Hotpatch With Windows Quality Updates.