Microsoft: Windows Update certificates expire on 17 May and 19 June 2027; devices without the replacement certificates, including all unsupported Windows versions, will stop getting updates
Microsoft said in its Windows message center on 8 October 2026 that certificates used to make trusted connections to Windows Update expire on 17 May 2027 and 19 June 2027, and that devices must hold the replacement certificates to keep receiving updates after those dates. Windows 11 25H2 and later need no action. Windows 11 24H2 and Windows Server 2025 need the September 2025 security update or later before 19 June 2027. Other supported Windows 11 releases, Windows Server 2022 and supported Windows 10 versions need the July 2026 security update or later before 19 June 2027. Windows 10 Enterprise 2019 LTSC, Windows Server 2019 and Windows Server 2016 need the July 2026 update or later before 17 May 2027. Any other (unsupported) Windows version must be upgraded, or it will lose access to Windows Update. Devices that get updates through Windows Server Update Services (WSUS) are not affected by this change. Microsoft advises identifying old or unsupported devices now and planning upgrades before the deadlines. Primary: Microsoft Windows message center; wire: BleepingComputer.
- Product
- Microsoft Windows client and Windows Server — Windows Update service certificates
- Versions
- Unsupported Windows versions lose updates; supported versions need Sept 2025 (24H2/Server 2025) or July 2026 updates
- Exploited in Australia?
- unknown
- Patch to
- Keep supported devices on current monthly updates (at least the July 2026 update; Sept 2025 for 24H2/Server 2025) and upgrade any unsupported Windows before 17 May 2027 (Server 2016/2019, Win10 LTSC 2019) or 19 June 2027 (others).
Primary: Microsoft Learn — Windows message center: Prepare for Windows Update certificate rotation in 2027 (8 Oct 2026) · Vendor: Windows IT Pro Blog — Prepare for Windows Update certificate rotation in 2027 · BleepingComputer — Microsoft: Outdated Windows devices will stop receiving security updates (9 Oct 2026)